Ok, So I Just 20 Mins Ago Got Hacked...

Langues: JP EN DE FR
users online
Forum » FFXI » General » ok, so i just 20 mins ago got hacked...
ok, so i just 20 mins ago got hacked...
First Page 2 3 4 5
 Ramuh.Thunderz
Offline
Serveur: Ramuh
Game: FFXI
user: Thunderz
Posts: 4118
By Ramuh.Thunderz 2009-08-31 12:32:16
Link | Citer | R
 
"Strategic launch detected"

nuke em boyz!
 Fenrir.Scragg
Administrator
Offline
Serveur: Fenrir
Game: FFXI
user: Scragg
Posts: 2579
By Fenrir.Scragg 2009-08-31 12:44:05
Link | Citer | R
 
Here you go...

http://www.ffxiah.com/wordlist.txt

<?php

$domain = "www.playonline-euix.com";
$target_url="http://$domain/cisweb/app/addif.asp";

$wordlist_file = dirname(__FILE__)."/wordlist.txt";
if (!file_exists($wordlist_file)){
die("Wordlist file $wordlist_file not found.\n");
}
$words = file_get_contents($wordlist_file);
$words = explode("\n",$words);
$word_count = count($words);
$letters = "ABCDEFGHIJKLMNOPQRSTUVWXYZ";
$numbers = "1234567890";

function getRnd($str,$x){
for($i=0;$i<$x;$i++){
$rnd = rand(0,strlen($str)-1);
$ret .= substr($str,$rnd,1);
}
return $ret;
}
function getRndWord($x){
global $words,$word_count;
for($i=0;$i<$x;$i++){
$rnd = rand(0,$word_count-1);
$ret.= $words[$rnd];
}
return $ret;
}
while(1){
$fake_pol = getRnd($letters,4).getRnd($numbers,4);
$fake_pass = getRndWord(1).getRnd($numbers,rand(0,2));
$postfields = "name=$fake_pol&password=$fake_pass";
$header = array();
$header[] = "Host: $domain";
$header[] = "Accept: text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5";
$header[] = "Accept-Language: en-us,en;q=0.5";
$header[] = "Accept-Encoding: gzip,deflate";
$header[] = "Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7";
$header[] = "Content-length: ".strlen($postfields);
$header[] = "Keep-Alive: 300";
$header[] = "Connection: keep-alive\r\n";
$ch = curl_init($target_url);
curl_setopt($ch, CURLOPT_HTTPHEADER, $header);
curl_setopt($ch, CURLOPT_USERAGENT, "Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)");
curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
curl_setopt($ch, CURLOPT_COOKIEJAR,dirname(__FILE__).'/cookie.txt');
curl_setopt($ch, CURLOPT_COOKIEFILE, dirname(__FILE__).'/cookie.txt');
curl_setopt($ch, CURLOPT_FOLLOWLOCATION,1);
curl_setopt($ch, CURLOPT_HEADER , 1);
//curl_setopt($ch, CURLOPT_PROXY, "http://127.0.0.1:8118");
curl_setopt($ch, CURLOPT_POST,true);
curl_setopt($ch, CURLOPT_POSTFIELDS,$postfields);
echo "Curl Executing $fake_pol $fake_pass...";
$data = curl_exec($ch);
echo " done.\n";
//echo $data; exit;
}
?>
 Fairy.Tbest
Offline
Serveur: Fairy
Game: FFXI
user: Tbest
Posts: 5490
By Fairy.Tbest 2009-08-31 12:51:59
Link | Citer | R
 
Alexxe said:
tbh, i dont really rate your opinion Tbest, and couldnt care less if your glad or not. I just posted to give people a warning. Like i said, id been outta game, and not heard about all the scams. Plus id just switched over from Odin, where none of this was happening. And just cos my account got hacked doesnt mean i wont still be playing...
lol... It doesn't matter if you had JUST started playing. There's a nice big warning before you can hit the play option in PlayOnline that WARNS you about people doing this. No one should EVER fall for this.
[+]
 Midgardsormr.Sectumsempra
Offline
Serveur: Midgardsormr
Game: FFXI
user: Sect
Posts: 3723
By Midgardsormr.Sectumsempra 2009-08-31 12:53:52
Link | Citer | R
 
I almost understood what Scragg just said. o.o;
 Leviathan.Webjester
Offline
Serveur: Leviathan
Game: FFXI
user: Webjester
Posts: 394
By Leviathan.Webjester 2009-08-31 12:57:43
Link | Citer | R
 
Scragg said:


Fun!
 Ifrit.Kungfuhustle
Offline
Serveur: Ifrit
Game: FFXI
Posts: 24692
By Ifrit.Kungfuhustle 2009-08-31 12:59:03
Link | Citer | R
 
ok Scragg, my PHP is a bit rusty, so can you put that in ENGLISH?

unless that word list is referring to a list of possible passwords to this site.
Offline
Serveur: Remora
Game: FFXI
user: iLLogiX
Posts: 273
By Remora.Hackstealandbot 2009-08-31 13:04:08
Link | Citer | R
 
Aravol said:
Cant SE just sue the makers of this false website? Or somehow legally press charges or something?


if it was that easy to get ahold of these RMT, they would have done it when they started selling Square-Enix's game currency for real money. The sad fact is, this generates a surprisingly large amount of money for China. they dont want to do anything about it, and SE can't really make them
[+]
 Asura.Shua
Offline
Serveur: Asura
Game: FFXI
user: Shua
Posts: 167
By Asura.Shua 2009-08-31 13:04:26
Link | Citer | R
 
Honestly if it was a GM would they say mam/sir? i mean really. its your own fault you didnt see it. or the [GM] lacking infront their name? Im sorry, but if you went there. Then its your own fault lol.

Either farm for new ***, or use your freebie restore POL gives you once in a life time.
[+]
 Fenrir.Scragg
Administrator
Offline
Serveur: Fenrir
Game: FFXI
user: Scragg
Posts: 2579
By Fenrir.Scragg 2009-08-31 13:04:33
Link | Citer | R
 
wordlist.txt is just a subset of Linux's /usr/share/dict/words
 Odin.Alexxe
Offline
Serveur: Odin
Game: FFXI
user:
Posts: 28
By Odin.Alexxe 2009-08-31 13:09:40
 Delete | Edit  | Link | Citer | R
 
i dont need to farm for anything,or use my 1 time restore. my account got frozen by a GM before they could get into it. And in response to every one saying about the warnings as your logging in, and about what a GM does or doesnt say to you...
1. I dont pay much attention when logging in, as its usually 1st thing in the morning, whilst im getting my 2 sons, both under 2, ready for the day.
2. ive never been contacted by, or contacted a GM, so i dont know what they put or dont put.

Like i said earlier, my account has been frozen, and all ive gotta do is reactivate it, so guess i got lucky.
 Ifrit.Kungfuhustle
Offline
Serveur: Ifrit
Game: FFXI
Posts: 24692
By Ifrit.Kungfuhustle 2009-08-31 13:12:09
Link | Citer | R
 
oh, so its just a list of words that are just words O.o

If people could sue others on the internet, we'd be in a shitload of trouble. Since everyone is so damn sensitive, any lil butthurt could result in millions of dollars pissed away to soothe the pain.
 Carbuncle.Taintedone
Offline
Serveur: Carbuncle
Game: FFXI
Posts: 493
By Carbuncle.Taintedone 2009-08-31 13:16:06
Link | Citer | R
 
Kungfuhustle said:
oh, so its just a list of words that are just words O.o

If people could sue others on the internet, we'd be in a shitload of trouble. Since everyone is so damn sensitive, any lil butthurt could result in millions of dollars pissed away to soothe the pain.


I'm totally offended by this post and intend to sue Brogame.com for millions of yen (about $17.85). ^.^
[+]
 Ifrit.Kungfuhustle
Offline
Serveur: Ifrit
Game: FFXI
Posts: 24692
By Ifrit.Kungfuhustle 2009-08-31 13:18:47
Link | Citer | R
 
Taintedone said:
Kungfuhustle said:
oh, so its just a list of words that are just words O.o

If people could sue others on the internet, we'd be in a shitload of trouble. Since everyone is so damn sensitive, any lil butthurt could result in millions of dollars pissed away to soothe the pain.


I'm totally offended by this post and intend to sue Brogame.com for millions of yen (about $17.85). ^.^


GO AHEAD *** LOL!!!
 Carbuncle.Taintedone
Offline
Serveur: Carbuncle
Game: FFXI
Posts: 493
By Carbuncle.Taintedone 2009-08-31 13:19:46
Link | Citer | R
 
Kungfuhustle said:
Taintedone said:
Kungfuhustle said:
oh, so its just a list of words that are just words O.o

If people could sue others on the internet, we'd be in a shitload of trouble. Since everyone is so damn sensitive, any lil butthurt could result in millions of dollars pissed away to soothe the pain.


I'm totally offended by this post and intend to sue Brogame.com for millions of yen (about $17.85). ^.^


GO AHEAD *** LOL!!!


:D
 Shiva.Dwyte
Offline
Serveur: Shiva
Game: FFXI
user: dwyte
Posts: 128
By Shiva.Dwyte 2009-08-31 13:28:43
Link | Citer | R
 
dont they also say like, "hello [name], [job] of [nation] blah blah?" or is that only when u call to make a complaint and theyre letting you know that they gonna "work" on it?
 Carbuncle.Nightmarelord
Offline
Serveur: Carbuncle
Game: FFXI
user: BushinNmL
Posts: 80
By Carbuncle.Nightmarelord 2009-08-31 13:35:56
Link | Citer | R
 
i wanna get hacked, maybe they'll take my DOOOOOOOOOOOOOOOMARUUUUUUUUUUUUUUUUUUUUUUUU
[+]
Offline
Serveur: Remora
Game: FFXI
user: iLLogiX
Posts: 273
By Remora.Hackstealandbot 2009-08-31 13:49:59
Link | Citer | R
 
Dwyte said:
dont they also say like, "hello [name], [job] of [nation] blah blah?" or is that only when u call to make a complaint and theyre letting you know that they gonna "work" on it?

when i got GMd for telling Remora's token jackass to throw some ridils on some ***, the GM said "Hello, Hackstealandbot. we need to talk." i was like "oh god, youre dumping me arent you?!"... he didnt think it was very funny :\
[+]
 Carbuncle.Nightmarelord
Offline
Serveur: Carbuncle
Game: FFXI
user: BushinNmL
Posts: 80
By Carbuncle.Nightmarelord 2009-08-31 13:53:09
Link | Citer | R
 
Hackstealandbot said:
throw some ridils on some ***
 Ifrit.Rerisen
Offline
Serveur: Ifrit
Game: FFXI
user: Mafai
Posts: 5
By Ifrit.Rerisen 2009-08-31 13:55:39
Link | Citer | R
 
Kungfuhustle said:
ok Scragg, my PHP is a bit rusty, so can you put that in ENGLISH?

unless that word list is referring to a list of possible passwords to this site.


its a script to send fake info to the RMT phishing site. It looks like it generates a fake POL ID (4 letters and 4 numbers) and password from the wordlist.
 Remora.Dubont
Offline
Serveur: Remora
Game: FFXI
user: Dubont
Posts: 629
By Remora.Dubont 2009-08-31 14:08:57
Link | Citer | R
 
Hackstealandbot said:

when i got GMd for telling Remora's token jackass to throw some ridils on some ***, the GM said "Hello, Hackstealandbot. we need to talk." i was like "oh god, youre dumping me arent you?!"... he didnt think it was very funny :\


lol..when i got GMd for abrev the word come i got wisped to jail...and the Gm was like "Hello {name}, {race} {job} of {nation}. I am {Name}. I apologize for the inconvenience, but we have a matter that we must discuss.
 Fairy.Tbest
Offline
Serveur: Fairy
Game: FFXI
user: Tbest
Posts: 5490
By Fairy.Tbest 2009-08-31 14:10:40
Link | Citer | R
 
Alexxe said:
i dont need to farm for anything,or use my 1 time restore. my account got frozen by a GM before they could get into it. And in response to every one saying about the warnings as your logging in, and about what a GM does or doesnt say to you...
1. I dont pay much attention when logging in, as its usually 1st thing in the morning, whilst im getting my 2 sons, both under 2, ready for the day.
2. ive never been contacted by, or contacted a GM, so i dont know what they put or dont put.

Like i said earlier, my account has been frozen, and all ive gotta do is reactivate it, so guess i got lucky.
And all we're saying is... It's your own damn fault for not reading the warning that comes up before you can even log in. You're the type of person that doesn't read contracts before they sign them, aren't you? Can I get your name and home address? I'd like you to sign a few things for me.
[+]
 Midgardsormr.Sectumsempra
Offline
Serveur: Midgardsormr
Game: FFXI
user: Sect
Posts: 3723
By Midgardsormr.Sectumsempra 2009-08-31 14:11:04
Link | Citer | R
 
Does anyone have a server with CURL ? I don't feel like setting one up right now ><
 Bahamut.Pheliont
Offline
Serveur: Bahamut
Game: FFXI
user: Pheliont
Posts: 86
By Bahamut.Pheliont 2009-08-31 14:15:28
Link | Citer | R
 
I always thought it was www.playonline.com/us and the -enix never existed?
 Bahamut.Stanflame
Offline
Serveur: Bahamut
Game: FFXI
user: Stanflame
Posts: 6173
By Bahamut.Stanflame 2009-08-31 14:15:54
Link | Citer | R
 
who has september 1st affected?
 Carbuncle.Corrderio
Offline
Serveur: Carbuncle
Game: FFXI
user: Corrderio
Posts: 178
By Carbuncle.Corrderio 2009-08-31 14:17:20
Link | Citer | R
 
www.playonline.com is the only valid POL site. These RMT companies try to make fakes to fool you. Though yeah I don't see any excuse to get fooled since this stuff isn't new and has been going on for over a month, and SE already has a warning about it before you even play XI.
[+]
 Fairy.Tbest
Offline
Serveur: Fairy
Game: FFXI
user: Tbest
Posts: 5490
By Fairy.Tbest 2009-08-31 14:17:54
Link | Citer | R
 
Pheliont said:
I always thought it was www.playonline.com/us and the -enix never existed?
It's a fake site to steal your info and take your stuff.... But, really... Please, go put in your info on that site and see what happens.
Offline
Serveur: Remora
Game: FFXI
user: iLLogiX
Posts: 273
By Remora.Hackstealandbot 2009-08-31 14:19:04
Link | Citer | R
 
Corrderio said:
www.playonline.com is the only valid POL site. These RMT companies try to make fakes to fool you.


from what i gather from this thread, they're doing a pretty good job lol
[+]
 Ramuh.Dasva
Offline
Serveur: Ramuh
Game: FFXI
user: dasva
Posts: 40469
By Ramuh.Dasva 2009-08-31 14:19:08
Link | Citer | R
 
LOl this OP makes me laugh. No one told me so I didn't know... Has anyone told you about those african lotteries you keep winning? If not I think I can make some up for you. Just gotta send me 10k so they can do paperwork to get you your 10mil prize!!!
[+]
 Bahamut.Pheliont
Offline
Serveur: Bahamut
Game: FFXI
user: Pheliont
Posts: 86
By Bahamut.Pheliont 2009-08-31 14:19:14
Link | Citer | R
 
Corrderio said:
www.playonline.com is the only valid POL site. These RMT companies try to make fakes to fool you.


Thank you. I was thinking that as I got a /tell from a person claiming to be a GM ~3 weeks ago. Same basic setup, but I was afk at the movies. Called GM they have nothing against me.
 Odin.Alexxe
Offline
Serveur: Odin
Game: FFXI
user:
Posts: 28
By Odin.Alexxe 2009-08-31 14:19:45
 Delete | Edit  | Link | Citer | R
 
LOL, i never once said it wasnt my own fault... of course it was, no-one else typed my details in. I just dont appreciate the stupid comments, like saying i dont read contracts, and you wanna come get me to sign stuff. Things happens sometimes, thats life. No ones perfect. But if all you can do is offer non constructive critiscism, thats fine. Either way im not bothered what anyone thinks. I was just informing ppl of my experience.
Log in to post.