+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Beginner Hacking (https://hackforums.net/forumdisplay.php?fid=4)
+---- Thread: Help with Retrieving Account by Accessing DB (/showthread.php?tid=6265119)
Help with Retrieving Account by Accessing DB - InXP - Mar 2, 2024
Hi,
Looking for some advice with retrieving my account on a game. I made the account in 2012 and managed to access it again in 2021 however I don't believe I updated it to my current email address, and I cannot remember my password. I made a list of possible password combinations that I would have used at the time however none are correct, and have tried all my emails for password recovery - also none are correct. I have tried contacting support but they have not responded, and it is well known that they don't respond at all oftentimes. They refuse to help with account recovery unless you have receipts of in-app purchases (of which would be on the unknown email linked to my account). I do have Google Play receipts for purchases however I have multiple accounts on the game and no username is attached to any of the receipts, so unsure if they're for the correct account, plus support isn't getting back to me for me to pass the receipts on to them. The account is of low monetary value but high sentimental value to me.
The game is notorious for poor security with multiple known data breaches over the years, so I thought it may be worth trying to gain access to the DB myself to retrieve my account information (PW hash, email etc.) seeing as the staff refuse to be in any way helpful.
I have limited knowledge on the specifics of hacking but I do have general IT/programming knowledge as it's my profession. I have gotten as far as using NMAP to scan for open ports on their server to access their database(s) (found both PostgreSQL and MSSQL) and then used Metasploit Framework to attempt to exploit vulnerabilities but I seem to be running in circles, and feel as though I may be approaching it incorrectly (wouldn't be surprising given my lack of experience in this field).
I know that the game uses AWS to host their servers and was also wondering if that could be the reason I'm having issues with using MSF.
I understand this post screams noob (because I am lmao) but I am at a loss and struggling to find much information online. Could anybody give me some pointers on next steps or explain what/how I could do things differently?
RE: Help with Retrieving Account by Accessing DB - oRequiem - Mar 2, 2024
You'd probably be better off trying to figure out which email it was back then. It's mostly going to be a memory game, but maybe back track through your entire online life and see if maybe another account you had back then is using that same email to possible get access to those.
RE: Help with Retrieving Account by Accessing DB - DramaKing - Mar 3, 2024
(Mar 2, 2024 04:07 PM)InXP Wrote: Hi,
Looking for some advice with retrieving my account on a game. I made the account in 2012 and managed to access it again in 2021 however I don't believe I updated it to my current email address, and I cannot remember my password. I made a list of possible password combinations that I would have used at the time however none are correct, and have tried all my emails for password recovery - also none are correct. I have tried contacting support but they have not responded, and it is well known that they don't respond at all oftentimes. They refuse to help with account recovery unless you have receipts of in-app purchases (of which would be on the unknown email linked to my account). I do have Google Play receipts for purchases however I have multiple accounts on the game and no username is attached to any of the receipts, so unsure if they're for the correct account, plus support isn't getting back to me for me to pass the receipts on to them. The account is of low monetary value but high sentimental value to me.
The game is notorious for poor security with multiple known data breaches over the years, so I thought it may be worth trying to gain access to the DB myself to retrieve my account information (PW hash, email etc.) seeing as the staff refuse to be in any way helpful.
I have limited knowledge on the specifics of hacking but I do have general IT/programming knowledge as it's my profession. I have gotten as far as using NMAP to scan for open ports on their server to access their database(s) (found both PostgreSQL and MSSQL) and then used Metasploit Framework to attempt to exploit vulnerabilities but I seem to be running in circles, and feel as though I may be approaching it incorrectly (wouldn't be surprising given my lack of experience in this field).
I know that the game uses AWS to host their servers and was also wondering if that could be the reason I'm having issues with using MSF.
I understand this post screams noob (because I am lmao) but I am at a loss and struggling to find much information online. Could anybody give me some pointers on next steps or explain what/how I could do things differently?
I would try to search for those database dumps rather than trying to do it yourself. Hopefully, the vulnerabilities were remediated.