A Traitor in our mist

04/20/2005 00:33 F1ik#16
*HACK THE PLANET* > Hackers featuring Angelina Jolie yummmy
04/20/2005 01:51 UltimateApocalypse#17
I think the database probably also has a list of all the items you have. Which means, you chould probably add a couple full 2 soc sets of equipment to your own account or something. Of course, that's just my guess. :p
04/20/2005 03:22 Fiya#18
Wow... thats alot of posts.

I just made this Topic for a teasing of Kitsunepaws, not a means of releasing a(n) exploit/hack but wow...

:eek: :eek: *Speachless* :eek: :eek:

Edit: Added Karma for your wealth of knowledge ;)
04/20/2005 09:14 wondersven#19
most likely they dont use a raw MySQL database for the character profiles, just for login.

but, if you are able to gain the u/p of players, you might be able to get server root/admin u/p. Or even GM accounts.

so, you could try using the same u/p on different serivces the server is running and seeing if that gives you anything as far as directories (character databases) or client applications (GM Client/patch).
04/20/2005 15:02 Flank#20
I did a little prowling on the web site yesterday and I found a few things. They are using Microsoft IIS 5.0 which is very exploitable and port 21 is open also which is FTP and Serv-u 6.0 is running on that. The only vulnerablity I could find for that was not remotable so no luck there. I never got ahold of the Login or Game server's Ip so I never scaned any of them. You also can not ping the web server. Seems like eather a firewall or router is blocking IMCP packets. But its there.
04/21/2005 01:30 KitsunePaws#21
Oh man.. This is like universally stupid...
But here..
Try your luck on LION server
*ahem*
What IP
?? >.>

<.<
04/21/2005 02:15 Flank#22
I'm not sure but I think posting that ip on this forum is illegal, not only to the forum rules but the forum hoster's rules. I would remove it quickly.
04/21/2005 06:36 KitsunePaws#23
:)
04/21/2005 15:42 Lowfyr#24
plz report all exploits (not the ingame exploits) to the developers from Conquer Online

hacking their database is illegal and you will be punished if they cough ya

so plz be fair to the co community and help to fix such vulnerabilitys

you can discuss the problems but I'll delete all in-deph informations, thx.
04/21/2005 17:39 BadBoY_AC#25
i found many exploits.. the database server is full with "backdoors"

whatever.. its illegal...
04/21/2005 19:17 KitsunePaws#26
Sry about that Lowfry
I tried to report it to them
I got ignored
04/22/2005 03:00 NyaR#27
u gotta email it to them [Only registered and activated users can see links. Click Here To Register...]

the mods on the forums are nothing but babysitters
04/23/2005 05:49 godddie#28
i thought it was from the core ^^ lol
04/23/2005 09:59 KitsunePaws#29
lol, the core? XD
05/22/2005 08:42 anhang#30
how to you find the ip of the servers? PM me if u cant post it here, or email me at [Only registered and activated users can see links. Click Here To Register...]