| T O P I C R E V I E W |
| hackert0m |
I was wondering if script tags were enabled in these posts. and if so, which ones. i would try it, but if it didn't work, id look like kind of an idiot with a whole bunch of script in my post. aslo, since these posts are automaticly submitted to the web site, do you have any defense against directory transversals? I am wonder this, because I will soon be starting a forum on my now purchesd but not started website www.blackcommand.com I am a traitor to the world yet an ally to all. |
| blade eater |
hmmph, that's your website you payed for? 
Check out my forum: http://bladekutansa.proboards55.com/index.cgi
|
| qwerty lover |
is it me or does hakert0m sound like a bit of a nerd hu needs to get out more www.xxx.com 4 fun and games |
| hackert0m |
and the people who have three pages about runescape don't?
just sayin...I am a traitor to the world yet an ally to all. |
| hackert0m |
I paid for the url, but i have my own server. I am a traitor to the world yet an ally to all. |
| blade eater |
So far it doesn't look like a forum.
Check out my forum: http://bladekutansa.proboards55.com/index.cgi
|
| hackert0m |
you noticed? im in the planning stages. My sebsite isn't just going to be a forum, but also a website for tutorials on vbscript and some complex batch files that incorperate vbscript. im planning on giving downloads as well, such as my newest program the Trojan-Killer. but, as im sure you can tell, im still in the begining stages. I am a traitor to the world yet an ally to all. |
| blade eater |
And if those things have viruses on them? What will you do then?
Check out my forum: http://bladekutansa.proboards55.com/index.cgi
|
| black_falcon |
I'll start by introducing myself, my name is, well my hacker name is Black Falcon and
I recently (April 30, 2006) hacked the Neopets database. Yeap, it claimed that they were down for maintenance...lol
As this has never been done
until now, I can't help but be proud of myself. I'm also more then excited about sharing
my secret with the world. As Neopoints and accounts are in high demand, many people are
looking for a way to just get any password they desire. I will explain exactly how this
newly found database flaw works under one condition, YOU MUST KEEP IT SECRET! If Neopets
discovers this flaw has been taken advantage of they will surely fix it, meaning no more
hack. It took me months of code to finally come across this encryption error and here it
is, it's about as hard to do as brushing your teeth. But first I'll explain how it works.
As we all know Neopets uses a "Forgot Password" feature. Meaning you may simply enter your
username and your password will be sent to you via email. With that thought in mind, and
knowing that in order to send an email to another email, Neopets must have an active email
account outside of their server.(So Neopets could not use an @neopets.com address)I had
always figured they would've just used a personalized email address. So last night I was
scanning through their database (I had just about given up at this point) and there it was,
their blasted email address for the "Forgot Password" feature. As to keep this password hidden
from people like me it had always been cloaked as [email protected] (cloaking a standard email
address on a server like yahoo is a common hacker code which means Neopets are hackers too lol),
to prevent people like me making a code like this. So with all of that said, I expect full credit
as a qualified hacker! xD I'll cut to the chase and give you all what you want, get as many accounts
as you can because it's only a matter of time before Neopets corrects this flaw.
Now to the fun part. There will be a bit of work you have to do on your own so read carefully. You
will be using your Neopets account to pose as the account of the one you wish to hack. Therefore you
must provide your account name, password, email address and the account name of the one you wish to hack
INSIDE of the code. This code will then be sent to [email protected] (Their secret email address) which
will then be redirected to the Neopets database, encrypting the information. The information will then
be redirected to you, but since you are posing as the account of the one you are hacking, Neopets won't
know the difference. To explain this process further, the Neopets database works like this. When one requests
their password, it will of course be sent to the email entered into the account information. But if your
account is posing as theirs,(which means you must use the email used on *your* neopets account) then it
would simply send you the password.
I have typed in caps where you must do the adding, DO NOT alter or edit any of the code EXCEPT for what you must
add in, which is: 1. Username Of The Account You Wish To Hack
2. Username Of Your Account
3. Password Of Your Account
4. Email Address Of Your Account
Send an e-mail to [email protected] (It doesn't matter what type of email account you are using)
In the subject option, type: passwordretrive000memberID=?auto.over.ride
In the actual e-mail part, copy and paste this:
<Java/HTML Script>
<Codec="http://www.neopets.com">Forgot Password</codec>
<"pwd sys rtrv" Member_"YOUR NEOPETS USERNAME HERE">
<pwd_"YOUR NEOPETS ACCOUNT PASSWORD">
<eml_"YOUR ACCOUNT EMAIL">
<RedirectUser_pwdretrieve_"VICTIM'S NEOPETS USERNAME HERE">
<Encryption Data URL="http://www.neopets.com/data/base/encrypt">
<Data Code="http://www.neopets.com/data/base/redirect">0110-0111-0112-0113<Redirect></Data Code>
<Data Email="http://www.neopets.com/emailpassword">[email protected]</Data Email>
</Java/HTML Script> (Trying to access any of the links in the code (besides www.neopets.com) will result in a error page, they're not going
to let just anyone see their database silly.) Who would've thought that simple code is what stood between you and any account you wanted? xD...DO NOT ATTEMPT
THIS ON THENEOPETSTEAM. I have warned you once, if you do this they will know who you are and the hack will be
ruined for everyone. After you have done this you will receive your standard Neopets Forgotten Password email within 24
hours(As you are not using the standard password retrieve method it takes longer to process in the database :p),
with one little difference...The username and password will be that of the one you wished to hack. I bet you're
feeling good now. :D Note that this is the first time Neopets has EVER been hacked. NOTE: If for any reason this does not work for you, retry the code, and make sure all the information entered is correct. -Black Falcon |
|
