lol... tried... doesn't work... you guys suck...
6
posts
Greetings SC,
This time I didn't share my plans to hack the website since I didn't want it to be prevented, and 3 days of rainbow table cracking and 34 GB password list bruteforce attempts have paid off as I logged into the SC servers MySQL database on port 3679 (the default tends to be 3769 instead but the results of port scanning gave the one I mentioned). Right after getting access I've dumped the whole database into an .sql file and currently waiting for it to be imported back onto my own server, so I can read the user / password list, and write it into a comprehensible columned format.
I'll come back with a zip of all the chat logs, accompanying a list of user / password information, so stay tuned!
It's quite possible, but normally people encrypt passwords with one way hashes these days... and those take a long time to crack...
And most servers are equipped standard with brute force password protection.
Let alone, the chances of the database being set up to allow remote access are incredibly slim. I mean someone would have had to manually set it that way.
So... the cookies are a possibility for temporary breaches. But you only need to log in and log out to force everything to reset... if the software was written correctly...
Plus the port on the servers is closed... you can't even connect to her mysql over that port... she's on Amazon servers... there is no way you are getting in...
6
posts