Hack Forums
Someone logged in to My aiobuy - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Whitehat • Blue Team • Defensive Security (https://hackforums.net/forumdisplay.php?fid=448)
+---- Forum: Malware, Rat, and Virus Removal (https://hackforums.net/forumdisplay.php?fid=110)
+---- Thread: Someone logged in to My aiobuy (/showthread.php?tid=5287009)

Pages: Pages 1 2


* - Goldbach - May 30, 2016

Someone else just did this to me just now


* - Cecilia - May 30, 2016

(May 30, 2016 06:09 PM)Goldbach Wrote:  Someone else just did this to me just now

Did you sign up to any sites with the same password you used on AIOBuy.
I mean ANY site (including facebook). A lot of databases have been dumped resulting in a lot of combolists being made and tried against systems like AIOBuy.


* - Goldbach - May 30, 2016

(May 30, 2016 06:18 PM)LaPanthere Wrote:  Did you sign up to any sites with the same password you used on AIOBuy.
I mean ANY site (including facebook). A lot of databases have been dumped resulting in a lot of combolists being made and tried against systems like AIOBuy.

Yes I have, I changed the password to a unique one.


* - Cecilia - May 30, 2016

(May 30, 2016 06:24 PM)Goldbach Wrote:  Yes I have, I changed the password to a unique one.

They probably had you in a combolist, I would advise also changing all other passwords to unique passwords.

Tools like LastPass and KeePass can help with this and even automate the process.

AIOBuy has no captcha system (and a what seems like really shitty csrf method).
I'm not sure why he removed it, or did not actually get around to adding it.


* - CutMyArmOrHangMe - May 31, 2016

(May 30, 2016 06:26 PM)LaPanthere Wrote:  They probably had you in a combolist, I would advise also changing all other passwords to unique passwords.

Tools like LastPass and KeePass can help with this and even automate the process.

AIOBuy has no captcha system (and a what seems like really shitty csrf method).
I'm not sure why he removed it, or did not actually get around to adding it.

Im considering removing aiobuy as IT seems shit.


* - Goldbach - May 31, 2016

(May 31, 2016 12:52 AM)Quanizz Wrote:  Im considering removing aiobuy as IT seems shit.

Maybe I should build my own ;o


* - DuguWudi - May 31, 2016

(May 30, 2016 06:26 PM)LaPanthere Wrote:  They probably had you in a combolist, I would advise also changing all other passwords to unique passwords.

Tools like LastPass and KeePass can help with this and even automate the process.

AIOBuy has no captcha system (and a what seems like really shitty csrf method).
I'm not sure why he removed it, or did not actually get around to adding it.

Well, why not implement a captcha, google captcha is free isnt it?


* - Cecilia - May 31, 2016

(May 31, 2016 01:36 AM)DuguWudi Wrote:  Well, why not implement a captcha, google captcha is free isnt it?

No shit, I told him on the thread.
Its stupid not to have such things for login and registration at least.


* - ProtectNull™ - May 31, 2016

If you need further assistance let me know, although I will be away for a bit.