Mod Account Got Banned -

02 Feb. 2010 07:02am

hmm it took about 20 hours but they finally got me lol things you may need to know about mods

----------------------------------------
Gaia Online
----------------------------------------

Hello _________!

This email is being sent to you because an attempt was made to sign in to your Gaia account from an unfamiliar location (IP address). Using different IP addresses is common for many members, but it can sometimes indicate malicious activity is occurring on an account.

If you are trying to access Gaia from a new location, or from a computer you haven’t used for awhile, please click on the link below to verify that you are the true owner of the account. As always, if you weren’t expecting this email – because you’re not trying to access the account – you don’t need to click the link. As a general internet rule, never click on links in emails unless you’re expecting the email. We do recommend though that you change your password just to be safe the next time you access your account. The link below will expire upon use or 30-minutes after it’s sent, whichever occurs first.

To confirm that you are the owner of this account and that you wish to be able to login to Gaia , please click the following validation link:

Information | Gaia Online

Have a safe and fun time on Gaia!

The Gaia Online Administrative Team

----------------------------------------
Privacy Policy:
Privacy Notice | Gaia Online

Terms of Service:
Terms of Service | Gaia Online
----------------------------------------
Gaia Online and all images associated with GAIA Online are (C) Copyright 2003 - 2010 Gaia Interactive, Inc. All Rights Reserved
Gaia Online P.O. Box 612680 San Jose, CA 95161-2680

Heya guys,

There is currently a thread going in the main SD of a hacker that is trying to steal moderators their E-mail addresses to gain access to Moddog, SD, ect, ect, ect.
This E-mailaddress I'm currently sending from was compromised and the alternative E-mail was changed to "Tyler777@Bungie.net" which is the same E-mail as the hacker who tried to compromise us this weekend.
To be on the safe side I asked the moderators in IRC to ban me.

Would you mind looking into the issue and mind unbanning me, since this hotmailaddress is fully back under control now.
I'll be changing the hotmail to be on the safe side this doesn't happen again.

Respectfully,
SoundBlast

she thinks its in her controll HAHA

**iamwilliam** · 02 Feb. 2010 07:06am

nice dude
you're so pro lol
xD

02 Feb. 2010 07:09am

lol did u read that part about her securing her email? im still in it HAHAHA when her accounts unbanned im gona have it again LMFAO

**Organic** · 02 Feb. 2010 07:15am

LOL SOUNDBLAST.
lmfao.

**Kint** · 02 Feb. 2010 07:16am

I'd be careful saying you still have email access of that account :x specially here

02 Feb. 2010 07:46am

Originally Posted by Kint

I'd be careful saying you still have email access of that account :x specially here

even if she gets full controll again i got her kookies LOL my hands in her JAR

**Chad** · 02 Feb. 2010 08:11am

Old School shit.

**Irishmitch** · 02 Feb. 2010 08:54am

Originally Posted by Chad

Old School shit.

Well it works Wich Is Good

**FrozenCandy** · 02 Feb. 2010 11:14am

Well that was fun reading, nice job : )
Did they really ban you?

**x-WTF** · 02 Feb. 2010 01:42pm

wooow, ur so pro.
like for real.
He's gonna get it back again xD

**Gina** · 02 Feb. 2010 03:32pm

awesome but yeah they got you

in the UG or UG silver you shoudl post how to do this!

**Torian** · 02 Feb. 2010 07:37pm

Download the staff discussion and upload on a free host.

**Stapled** · 02 Feb. 2010 07:46pm

epic hax!

how did you get the account anyways?

**Smithno13** · 02 Feb. 2010 08:14pm

Soundblast is a guy.
He lives in... Sweden?
His name is lesley.
Pretty cool guy actually.

02 Feb. 2010 08:19pm

so everyone knows the identity

**x-WTF** · 02 Feb. 2010 08:29pm

How did you guys hack a mod, its Crazy
props for that.

**sin of the wicked** · 03 Feb. 2010 12:44am

Wow epic. If I was an admin I would keep him banned. Just because he might be hacked again. Which you are going to do anyway lol.

**Gabe** · 03 Feb. 2010 03:29am

Originally Posted by Torian

Download the staff discussion and upload on a free host.

I like that idea.

**Artificial** · 03 Feb. 2010 03:34am

Originally Posted by Jester

even if she gets full controll again i got her kookies LOL my hands in her JAR

How did you get her session cookie?

**Smithno13** · 03 Feb. 2010 04:08am

HIS session cookie xDD
You used some injected script right jester?
I want ;P

**Binary** · 03 Feb. 2010 04:08am

Originally Posted by Artificial

How did you get her session cookie?

I am most likely guessing a XSS script saved as an image.

03 Feb. 2010 04:46am

Originally Posted by Torian

Download the staff discussion and upload on a free host.

lol its to late for that if u got to me before it got banned i woulda donwloaded i just screen shotted posts that interested me

**Artificial** · 03 Feb. 2010 04:47am

Still haven't said how you got their cookie. How did you get around HTTPOnly?

03 Feb. 2010 04:52am

Originally Posted by Artificial

How did you get her session cookie?

i never logged out XD just kept my computer on all night XD she is using a new email the account just went inactiv gona keep her paypal and moneybookers tho XD she changed the emails password but i didnt log out so i still have acsess

I got a simple way to inject a script to get Firefox/IE Passwords via a php script injected into the page it also grabs the cookies.txt file from there CPU and copies it to the server

all you do is report a post with the injected script (only one way to do it and i am sure u can figure it out your smart after all) but it has to be a PHP IMAGE! it logs all there stuff of anyone who goes to that page in the thread also u could probable get a color coded system to only get mods/admins/devs or get one to check the persons equipped items and steal if its a value of whatever you want or higher. but "IM LAZY XD"
gona try to get a dev or mod tonight i posted the script in the mods forum just before i was banned on that account so i gotta check my logs on my server and u know test out the cookie.txt files

**Artificial** · 03 Feb. 2010 05:01am

Originally Posted by Jester

I got a simple way to inject a script to get Firefox/IE Passwords via a php script injected into the page it also grabs the cookies.txt file from there CPU and copies it to the server

Ridiculous post makes no sense. PHP is a server-side programming language, you have no control over the client.

I call bullshit.

03 Feb. 2010 05:08am

Originally Posted by Artificial

Ridiculous post makes no sense. PHP is a server-side programming language, you have no control over the client.

I call bullshit.

You miss-understand, I use it to get stuff from the browser its on my server i just "copy" the info in the txt file that is it. Believe what u want. It is working for me.

**Artificial** · 03 Feb. 2010 05:12am

It's not what I believe, it's fact. What you're describing with PHP is not possible, and I should know, seeing as how I develop in it 4-8 hours on a daily basis. To say otherwise is like saying the moon is made of cheese.

Before you go posting an elaborate lie to boost your ego, at least have the decency to do some research so you don't look like a complete ass.

**Smithno13** · 03 Feb. 2010 05:14am

Arti, I am not sure how exactly jester would do it via PHP, but he showed it to riddle, and riddle verified.

03 Feb. 2010 05:15am

Originally Posted by Artificial

It's not what I believe, it's fact. What you're describing with PHP is not possible, and I should know, seeing as how I develop in it 4-8 hours on a daily basis. To say otherwise is like saying the moon is made of cheese.

Before you go posting an elaborate lie to boost your ego, at least have the decency to do some research so you don't look like a complete ass.

Whatever just leave it at that and leave me be.

**iamwilliam** · 03 Feb. 2010 05:16am

didnt he also get google to verify?

**Smithno13** · 03 Feb. 2010 05:18am

I dont believe google ever saw the account, I asked him about it myself.

03 Feb. 2010 05:18am

Originally Posted by iamwilliam

didnt he also get google to verify?

i showed google the account.....not anything more

**iamwilliam** · 03 Feb. 2010 05:20am

by "showed" do you mean
screen shots
or
giving him account info?

03 Feb. 2010 05:21am

Originally Posted by iamwilliam

by "showed" do you mean
screen shots
or
giving him account info?

heard of Team Viewer?

**iamwilliam** · 03 Feb. 2010 05:23am

oh ok then
that makes sense

03 Feb. 2010 05:45am

wht those this for?

**RobbyTheReaper** · 03 Feb. 2010 05:50am

i'm surprised she wasn't banned due to ip being different thats one of the main things gaia suspects for mods and admins is the ip

03 Feb. 2010 05:52am

Originally Posted by RobbyTheReaper

i'm surprised she wasn't banned due to ip being different thats one of the main things gaia suspects for mods and admins is the ip

if u get there email u can bypass this......

**RobbyTheReaper** · 03 Feb. 2010 05:56am

Originally Posted by Jester

if u get there email u can bypass this......

true

but then all it takes is then a single email to the company

if we wanted we could somewhat use this to are advantage

03 Feb. 2010 06:06am

Originally Posted by RobbyTheReaper

true

but then all it takes is then a single email to the company

if we wanted we could somewhat use this to are advantage

Lol didnt u read my post i didnt change any account info and she found out i was in her accounts so she sent an email read the email she sent

Thread: Mod Account Got Banned -

LinkBack

Thread Tools

Search Thread

Display

Mod Account Got Banned -

Posting Permissions