Porno Junkies Board Hacked :-0

**<IMX>** · 02-15-2003, 07:18 AM

I didn't see the hack, but you guys think the perp is russian?

Why?

Cause they displayed some sentences in rus?

...

If I was a pissed russian hacker I wouldn't go after your msg board.

**dirtdigger** · 02-15-2003, 07:23 AM

most hacker assholes russian

**Darin** · 02-15-2003, 07:23 AM

Im sorry, but the whois is slightly funny. Sorry to hear it tho, one of my fav boards.

Get those H@ckers!!!

**dirtdigger** · 02-15-2003, 07:24 AM

whois what you mean

**JayJay** · 02-15-2003, 07:26 AM

It aint funny man the guy was posting everyones fucking email addresses

**dirtdigger** · 02-15-2003, 07:40 AM

he is very bad guy and should be punish

**xxxdesign-net** · 02-15-2003, 08:16 AM

what the fuck.... typed pornjunkies.com (instead of porno) and got that popup
http://www.freesexmovies.com/

A guy double-fisting the girl's ass.....
this is some sick shit... Im sure she's loving every second of it!!!

**FadeEP** · 02-15-2003, 09:03 AM

It is no coincidence most of the cheaters we catch on our sites tend to be from the Slavic regions.

That blows

**Dragon Curve** · 02-15-2003, 09:14 AM

I'm not really surprised this could happen; those prepackaged webboards/CMS engines are the most insecure things I've ever seen. I wouldn't expect to catch this guy considering exploiting vulnerabilities in things like this isn't as straight forward as compiling and executing, so if he has enough clue to do this, he'll most likely have enough clue to not be doing this from his home box =P

This is probably the #1 reason to have sites custom coded, not for the fact that you could make things more secure than these boards, which you probably couldn't - but for the fact that your code won't be open source for people to sit there and analyze for vulnerabilities.

Surely there are some logs of what happened, so work out where he broke in and patch it up immediately - I don't really think tracking down this guy is going to be possible.

Ah well, I don't think there is any way you can make something TOTALLY secure - so there's always going to be someone out there who has the ability to screw you over =P

All I can say is code your own stuff =P Open source is baaad.

**Dragon Curve** · 02-15-2003, 09:18 AM

Side note .. why on earth is the board still running vBulletin 2.2.5? That's got a XSS vuln for starters and another vuln which are public knowledge from Bugtraq. Upgrade it .. now.

**TrafficTeam** · 02-15-2003, 09:34 AM

Just got this email:

At http://www.********.com we value your safety.
So register today and enjoy encrypted passwords and password protected admin folders.

This is a one time mailing, your email was grapped of the recently defaced Porno Junkies board at http://www.porno junkies .com
Where your email was posted in a public thread.

Header of the email:

Return-Path: <webmaster@********.com>
Received: from srv01.xxx-babes.net (root@localhost)
by xxx-babes.net (8.11.6/8.11.6) with ESMTP id h1FIMLN04594
for <[email protected]>; Sat, 15 Feb 2003 19:22:21 +0100
X-ClientAddr: 80.80.14.211
Received: from blue15.bluewebhouse.com (80.80.14.211.ip.bluewebhouse.com [80.80.14.211])
by srv01.xxx-babes.net (8.11.6/8.11.6) with ESMTP id h1FIMKo04588
for <[email protected]>; Sat, 15 Feb 2003 19:22:20 +0100
Received: (from apache@localhost)
by blue15.bluewebhouse.com (8.11.6/8.11.6) id h1FIDIe00591;
Sat, 15 Feb 2003 19:13:18 +0100
Date: Sat, 15 Feb 2003 19:13:18 +0100
Message-Id: <[email protected] >
X-Authentication-Warning: blue15.bluewebhouse.com: apache set sender to webmaster@********.com using -f
To: [email protected]
From: ******** <webmaster@********.com>
Subject: Enjoy a webmaster that values safety ;)
Status:

WTF??

Rgds,JOKER

**Dragon Curve** · 02-15-2003, 09:47 AM

Another side note, I just broke into www.pornjunkies.com (local user) with its vulnerable openssl. How long has that vulnerability been around and how well has it been publicised? You guys REALLY need to fix your security.

**justsexxx** · 02-15-2003, 02:53 PM

It's backup but I guess they dion't lean to much

http://www.pornojunkies DOT com/admin/

Andre

**Platinum Albert** · 02-16-2003, 05:22 PM

On behalf of the Platinum Bucks and Porno Junkies Team, we want to thank all those people who have always supported us. We appreciate all your efforts and we will continue to provide the best service possible.

The problems have been identified, and we will move forward.

**buttman69** · 02-16-2003, 05:27 PM

that sucks. some people should spend more time working and less time hacking

**TDF** · 04-23-2003, 06:32 PM

hacking sux0rz

**asuna** · 04-23-2003, 06:35 PM

I love bumping old threads, especially with shit stiring topics, good job TDF!

**Vagisil** · 04-23-2003, 06:58 PM

Did anyone save the list? I'll buy it from you.

=)

**cluck** · 04-23-2003, 06:58 PM

leet hack dood.

**buddyjuf** · 04-23-2003, 07:07 PM

it was NOT not me

**asuna** · 04-23-2003, 08:07 PM

Wan't it MysteryMan?

Porno Junkies Board Hacked :-0

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment