Joymax Dump Server PWNED! XD

[Synx7]

Well, when I was grinding my client was crashed and appear the ???? error dialog. Before press any button I ask myself... "What do the SilkErrSender?". And open my sniffer for watch what this does... and Joymax was OwNeD! XD

Happend this:

220-FileZilla Server version 0.9.24 beta
220-written by Tim Kosse ([Only registered and activated users can see links. ])
220 Please visit http://sourceforge.net/projects/filezilla/

USER dump

331 Password required for dump

PASS joymaxdump

230 Logged on

TYPE I

200 Type set to I

PORT 192,168,1,33,8,174

200 Port command successful

STOR \Hercules\2N[2008-12-28 01-15-36]_70_18 Hercules_iLucky.dmp

550 Filename invalid

TYPE I

200 Type set to I

PORT 192,168,1,33,8,175

200 Port command successful

STOR \....\2N[2008-12-28 01-15-36]_70_18 Hercules_iLucky.dmp

150 Opening data channel for file transfer.
226 Transfer OK

Then I'll try to connect to this with my FileZilla:
IP: 220.85.132.111:21
ID: dump
PW: joymaxdump

And... WORKS!

http://img517.imageshack.us/img517/3677/dump1ah7.png

But the server are very restricted, I only can upload files, but can't download or read files stored in the server =/

This really is useless, but maybe for curious ppl is interesting.

Srry for my english XD

Enjoy!

EDIT: For all who says I stole the info of another forums. IS FALSE. This report is about my char, look this:

http://img178.imageshack.us/img178/2...5481788lm3.jpg

If you find it in another site, is 100% sure they copy and paste from here...

[Nova1337]

thats one, big LOL !

[SunnyBow]

LMAO! Ive uploaded a pic of mah car, its called Afbld.517.jpg LOLOLOL!

[SpInKsTaR]

hahah nice find

EDIT: Done a quick port scan, FTP is the only port open D:

[EdekK]

but what does it mean. did joymax hosted the private servers? or its just kinda bug

[Synx7]

Originally Posted by EdekK

but what does it mean. did joymax hosted the private servers? or its just kinda bug

No, just the clients of ECSRO still have the SilkErrSender and when the game crashes the dump is sended to Joymax dump server.

[TheOwnWay]

Thanks for sharing, testing something ...

edit: joymax is really dumb..

what an easy pass, I bet the information for their database is ID: Data Pass: joymaxdata..

[Ninja1337]

Originally Posted by SpInKsTaR

hahah nice find

EDIT: Done a quick port scan, FTP is the only port open D:

so u mean that u got the ftp port of joymax ? after what i saw in ******** forum they only need the ftp ip to get server files

[TheOwnWay]

FTP?
Dunno if you need, but this is an old thing
ftp://yahoogame.nefficient.co.kr/pub/yahoogame/joymax/

edit: another ftp, found in an old txt file on my harddisk

ftp://joywebimg.cdnetworks.us/

[Synx7]

Originally Posted by Cr0nicl3

edit: another ftp, found in an old txt file on my harddisk

ftp://joywebimg.cdnetworks.us/

Confirmed, joymaximg and imgjoymax doesn't work for this XD