Raised This Month: $ Target: $400
 0% 

AMX Forums hacked?


Post New Thread Reply   
 
Thread Tools Display Modes
maariak
Junior Member
Join Date: Dec 2004
Old 12-11-2004 , 09:24  
Reply With Quote #21

BAILOPAN can u give me dJeyL's jabber. i got all of the jabber shit so just give me all of those that u know
maariak is offline
PM
hello, i am pm
Join Date: Jan 2004
Location: Canalization
Old 12-11-2004 , 10:43  
Reply With Quote #22

I am [email protected]

And I love jabber!111yams (0xBA1L style)

EDIT:
I contacted the Yahoo id that the "hacker" specified:
(11.12.2004 13:24:15) PMOnoTo:
Hey.. ;)

(11.12.2004 13:24:21) PMOnoTo:
I wanted to make a suggestion....

(11.12.2004 13:24:44) PMOnoTo:
What about learning english before script-kiddy-attacking good forums?

(11.12.2004 13:24:52) PMOnoTo:
I hope you understand what I mean... Have a nice day

(11.12.2004 13:27:4 PMOnoTo:
Oh yeah, one more thing, don't delete the forums or even more people
will hate you, and that will make you burn in the hell after your death,
you know Has to be painful, even a person without a life like you
doesn't deserver that in my opinion

(11.12.2004 13:28:04) PMOnoTo:
deserve '


He seems to be offline though.
__________________
hello, i am pm
PM is offline
devicenull
Veteran Member
Join Date: Mar 2004
Location: CT
Old 12-11-2004 , 11:29  
Reply With Quote #23

I guess thats what happens when you don't upgrade your forums? a few searchs found plently of exploits for ipb 1.3 :/

Quote:
Originally Posted by f1del1ty.oXi
Well there are two things that culd become of this:

After checking IPB's admin interface, there is no option that I see to wipe any mysql databases clean. Meaning most of the posts, users, and such should be saved.
You could easily do this will TRUNCATE TABLE, or DROP <databasename>.
If you have the ability to execute a sql query, then there's a lot of damage you can do.
__________________
Various bits of semi-useful code in a bunch of languages: http://code.devicenull.org/
devicenull is offline
f1del1ty.oXi
Veteran Member
Join Date: Nov 2004
Old 12-11-2004 , 12:33  
Reply With Quote #24

Ah yes, definetly forgot about the manual query you can do inside of it. So I guess he can.

But PM, I was just about to do the same thing. HE can hack but can't even make a normal news addition to djeyl's main page. Kinda sad. =x
f1del1ty.oXi is offline
PM
hello, i am pm
Join Date: Jan 2004
Location: Canalization
Old 12-11-2004 , 12:44  
Reply With Quote #25

Quote:
Originally Posted by f1del1ty.oXi
Ah yes, definetly forgot about the manual query you can do inside of it. So I guess he can.

But PM, I was just about to do the same thing. HE can hack but can't even make a normal news addition to djeyl's main page. Kinda sad. =x
I'd not say he can hack, he just saw how to do it on some script kiddie forums, found the first IPB forums, infected it and he thinks he is the biggest person on the world. It's pretty sad to see how dumb people can be
__________________
hello, i am pm
PM is offline
f1del1ty.oXi
Veteran Member
Join Date: Nov 2004
Old 12-11-2004 , 12:50  
Reply With Quote #26

But the thing I hate about this is that he's just some random person who comes in and registers and then just hacks it. I'd feel a bit better if it was an old admin that djeyl kicked out or hatnot, but it wasn't. IT's just some kid who could find the security holes as you said PM, and take advantage of them. Plus he might have seen how BIG those forums were, and thought that this would be a huge deal.

I just wish somehow I could set up some forums for the time being and get AMX users to use that now, because they are without forums and help right now. =\
f1del1ty.oXi is offline
m0gely
Junior Member
Join Date: Mar 2004
Old 12-11-2004 , 12:57  
Reply With Quote #27

The board rev doesn't mean it wasn't patched necessarily. And a new exploit not out in the wild, or just introduced could be possible too. I believe the SQL injection issue was dealt with.

At any rate, I have been waiting for dJeyL to come online on Jabber and as someone mentioned he just hasn't been online there for a couple days. If anyone knows how to get ahold of Artattack, he knows him personally. Art has also not been on Jabber for a while. *big sigh*

And I would strongly advise not attempting to log in.
__________________
-- m0gely
AMXMod guru of days long forgotten...
m0gely is offline
m0gely
Junior Member
Join Date: Mar 2004
Old 12-11-2004 , 13:10  
Reply With Quote #28

The AMX Mod forums just came back online.
__________________
-- m0gely
AMXMod guru of days long forgotten...
m0gely is offline
maariak
Junior Member
Join Date: Dec 2004
Old 12-11-2004 , 13:20  
Reply With Quote #29

yay!!!!!!!!!!!!!!1
maariak is offline
BAILOPAN
Join Date: Jan 2004
Old 12-11-2004 , 17:23  
Reply With Quote #30

Good to hear
__________________
egg
BAILOPAN is offline
Reply


Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump


All times are GMT -4. The time now is 07:17.


Powered by vBulletin®
Copyright ©2000 - 2024, vBulletin Solutions, Inc.
Theme made by Freecode