Offering my services to fix the hacking of PServers

11/15/2011 14:44 benco#76
Quote:
Originally Posted by Nekses View Post
its simple sql injection. you can fix this in 5 minutes haha.
I think it's a dupe hack ;)
11/15/2011 14:45 Nekses#77
hmm we changed nothing with cert :). still fixed
11/15/2011 14:46 HaGsTeR#78
Guys why all this talk about Cert?
ZSZC Also got hacked, as he said.. remember?
ZSZC Doesnt use Drew's cert manager... ZSZC opened long before drew made hes cert and published it
11/15/2011 14:47 benco#79
Quote:
Originally Posted by OutlawNL View Post
3 days searching 5 mins fixing that`s LaHonda781 not everyone is 1337 full kral paying for a fix
LOL I knew that hack problem before I see this post. I would like to make a server test to confirm what I thought.
11/15/2011 14:48 LaHonda781#80
Quote:
Originally Posted by HaGsTeR View Post
Guys why all this talk about Cert?
ZSZC Also got hacked, as he said.. remember?
ZSZC Doesnt use Drew's cert manager... ZSZC opened long before drew made hes cert and published it

Guys why all this talk about Cert?
ZSZC Also got hacked, as he said.. remember?
ZSZC Doesnt use Drew's cert manager... ZSZC opened long before drew made hes cert and published it
They use same cert, + any cert, even joymax cert is exploit able.

Btw bloody,close your god damned 8080 port if you dont want get hacked again.

[Only registered and activated users can see links. Click Here To Register...]

784k Silk already given out?
LoL
11/15/2011 14:50 HaGsTeR#81
well didnt someone say this is just a bug on drew's cert?
11/15/2011 14:51 kevin_owner#82
Quote:
Originally Posted by HaGsTeR View Post
Guys why all this talk about Cert?
ZSZC Also got hacked, as he said.. remember?
ZSZC Doesnt use Drew's cert manager... ZSZC opened long before drew made hes cert and published it
I haven't check it but the old cert might also have the same problem:)

EDIT: Confirmed the old certification in the sl.rar has the same exploit in it. so that's why zszc could also be hacked if they used that old certification.

EDIT2: The old cert does check it sorry:)
11/15/2011 14:52 benco#83
Quote:
Originally Posted by LaHonda781 View Post
They use same cert, + any cert, even joymax cert is exploit able.

Btw bloody,close your god damned 8080 port if you dont want get hacked again.

[Only registered and activated users can see links. Click Here To Register...]

784k Silk already given out?
LoL
LOL this exemple is a basic admin security, you have two solution to solve the problem.
11/15/2011 14:54 LaHonda781#84
@Up, what about put on the firewall?....
The billing scripts got bugs inside too.

Good luck bloody.
11/15/2011 14:56 misscatherine#85
Quote:
Originally Posted by Getzabelz View Post
Well I was meaning I'm not forcing anyone to give me any money that my work worths money, that's all, don't missunderstand my words please.

Now I dispose to go to sleep. Good night guys.\

I accept offers, I understand non big servers can't afford this price so I'm not that evil.
you were clear, you said you can fix it but it gunna cost us money, you don't have to be smart to understand the meaning of that sentence...just laughing at ya
11/15/2011 15:00 Getzabelz#86
Quote:
Originally Posted by misscatherine View Post
you were clear, you said you can fix it but it gunna cost us money, you don't have to be smart to understand the meaning of that sentence...just laughing at ya
No sir, I can fix it for money BECAUSE It needs my knowledge to be fixed. You're paying my work, tell me, who works for free? I got my own server too and I'm lacking free time.

And not only that, but even some general security setup which 90% of pservers needs right now. I think is an affordable and reasonable price for what's I'm offering.

You can take it or not, no drama, don't either need 'laughing' at me as you say. I'm not willing to hack anyone, in fact even kevin_owner asked me for help and I don't hesitate to give it. I don't want this exploit to be out there, but I was not willing to give any fast fix either, I want those who deserve it by their knowledge (and not following guides) to work their own out instead getting helped by hints.

Or those who wants to invest in their bussiness' security for their own good.
11/15/2011 15:05 Chernobyl*#87
Complexity ? T_T. Blind mssql injection.
11/15/2011 15:07 Getzabelz#88
Quote:
Originally Posted by Chernobyl* View Post
Complexity ? T_T. Blind mssql injection.
Mate your lost xD... There's nothing blind on this exploit, not even mssql injection... If you need any help you know I'll help you like you have done with me before, althought you always troll me x).
11/15/2011 15:09 benco#89
Quote:
Originally Posted by LaHonda781 View Post
@Up, what about put on the firewall?....
The billing scripts got bugs inside too.

Good luck bloody.
To prove my knowledge on this problem, I just tell you :

Request.xxxx should be add in Billing scripts

Or the Second solution do something to IIS.

Add solution 1+2 = the best solution but this one of solution for this security hole.
11/15/2011 15:23 Chernobyl*#90
Well, our servers wasnt hax0r3d using billing scripts.