Joymax Dump Server PWNED! XD

[Kape7]

Well, when I was grinding my client was crashed and appear the ???? error dialog. Before press any button I ask myself... "What do the SilkErrSender?". And open my sniffer for watch what this does... and Joymax was OwNeD! XD

Happend this:

220-FileZilla Server version 0.9.24 beta
220-written by Tim Kosse ()
220 Please visit http://sourceforge.net/projects/filezilla/

USER dump

331 Password required for dump

PASS joymaxdump

230 Logged on

TYPE I

200 Type set to I

PORT 192,168,1,33,8,174

200 Port command successful

STOR \Hercules\2N[2008-12-28 01-15-36]_70_18 Hercules_iLucky.dmp

550 Filename invalid

TYPE I

200 Type set to I

PORT 192,168,1,33,8,175

200 Port command successful

STOR \....\2N[2008-12-28 01-15-36]_70_18 Hercules_iLucky.dmp

150 Opening data channel for file transfer.
226 Transfer OK

Then I'll try to connect to this with my FileZilla:
IP: 220.85.132.111:21
ID: dump
PW: joymaxdump

And... WORKS!



But the server are very restricted, I only can upload files, but can't download or read files stored in the server =/

This really is useless, but maybe for curious ppl is interesting.

Srry for my english XD

Enjoy!

EDIT: For all who says I stole the info of another forums. IS FALSE. This report is about my char, look this:



If you find it in another site, is 100% sure they copy and paste from here...

[Nova1337]

thats one, big LOL !

[SunnyBow]

LMAO! Ive uploaded a pic of mah car, its called Afbld.517.jpg LOLOLOL!

[SpInKsTaR]

hahah nice find

EDIT: Done a quick port scan, FTP is the only port open D:

[EdekK]

but what does it mean. did joymax hosted the private servers? or its just kinda bug

[Kape7]

Originally Posted by EdekK

but what does it mean. did joymax hosted the private servers? or its just kinda bug

No, just the clients of ECSRO still have the SilkErrSender and when the game crashes the dump is sended to Joymax dump server.

[TheOwnWay]

Thanks for sharing, testing something ...

edit: joymax is really dumb..

what an easy pass, I bet the information for their database is ID: Data Pass: joymaxdata..

[Ninja1337]

Originally Posted by SpInKsTaR

hahah nice find

EDIT: Done a quick port scan, FTP is the only port open D:

so u mean that u got the ftp port of joymax ? after what i saw in ******** forum they only need the ftp ip to get server files

[TheOwnWay]

FTP?
Dunno if you need, but this is an old thing
ftp://yahoogame.nefficient.co.kr/pub/yahoogame/joymax/

edit: another ftp, found in an old txt file on my harddisk

ftp://joywebimg.cdnetworks.us/

[Kape7]

Originally Posted by Cr0nicl3

edit: another ftp, found in an old txt file on my harddisk

ftp://joywebimg.cdnetworks.us/

Confirmed, joymaximg and imgjoymax doesn't work for this XD

[Manteigaassassina]

Joymax is so noob :O (and me too )

BTW:Cr0nicl3 ...a guy of ur "JoymaxFamClub" robbed my sun glavie ¬¬


PS: They hacked a guy from my union which he use to scam ( i didnt get anything in the exchange) me

[TheOwnWay]

JoymaxFanClub pwnz everyone `,..,´

b2t

Is there any way to get the pass?

[Manteigaassassina]

I really dont know if the guy is really hacked by the JFC, he just say "Joymax Fan Club says Hello"...

Btw.. im a really good person in-game...never scammed, dont ks, and really friendly with all players...so, why this people are so fuc*king bad?

and btw....i bet u bot too lol

[TheOwnWay]

You think I'm botter ?
No...but why?!
Because I won't pay for Bots and all Freebots are gay.
So, Legit FTW!

And you was botting, and botter will fail!

[Kape7]

Originally Posted by Cr0nicl3

JoymaxFanClub pwnz everyone `,..,´

b2t

Is there any way to get the pass?

Brute force...