Old email exploit?

Can someone explain it?
I want to figure out a new way to find emails, thanks!

If I'm not mistaken it had something to do with their profile (apparently somewhere behind the scenes it's listed) or something. Of course I've been on a lot of avatar sites so it may have not been Gaia that this exploit was on.

SilkyNick wrote:

If I'm not mistaken it had something to do with their profile (apparently somewhere behind the scenes it's listed) or something. Of course I've been on a lot of avatar sites so it may have not been Gaia that this exploit was on.

oh, I was just looking at the profile source to find a start

there were a couple

Butts wrote:

there was a couple

any more info?

Use wrote:

any more info?

three letters, gsi. Admin and administration, along with some of the http://test1www.gaiaonline.com test servers. I'm on a mobile so excuse me with these horrible touch screen keyboardso

Butts wrote:

three letters, gsi. Admin and administration, along with some of the http://test1www.gaiaonline.com test servers. I'm on a mobile so excuse me with these horrible touch screen keyboardso

From what I've been hearing, anything GSI related is basically patched now?

So basically this is what you need to know:
1) there was an exploit where you could view emails of old accounts possibly of great worth.
2) you could go to sites like hotmail.com not sure if i worked with all email services, anyhow you could re-register that email if it hadn't been used in a long time then you could recover password via gaia pass reset.

And that was the exploit in a nutshell not sure if it still works

Kitsune wrote:

So basically this is what you need to know:
1) there was an exploit where you could view emails of old accounts possibly of great worth.
2) you could go to sites like hotmail.com not sure if i worked with all email services, anyhow you could re-register that email if it hadn't been used in a long time then you could recover password via gaia pass reset.

And that was the exploit in a nutshell not sure if it still works

I still do part 2 on any accounts I get the email to.
I'm sure that exploit doesn't work anymore

If I remember correctly, there was something dealing with gcash_history or something that was an exploit, but I didn't really get into it, so I'm not sure if that's the one I'm thinking of that can pull emails or not.

The Email exploit was a tool for the Gaia's Cash Shop purchases i found. There was a open area of the Cash Shop that was used by administration to view purchase history. If i remember exact it displayed the email for a user if you input their username or "user ID" . I used it lookup emails and checked availability on the email provider, if available i would create the email then send the Gaia password rest to it using "I forgot my Password". This got annoying so i got a programmer from here to create a program that automated the lookup of user ID's/Emails that dumped them to text files to analyze.

In the end it got leeked and patched.

Butts wrote:

three letters, gsi. Admin and administration, along with some of the http://test1www.gaiaonline.com test servers. I'm on a mobile so excuse me with these horrible touch screen keyboardso

Yeah. The test servers were really insecure at that time, so I know there were a few other people including myself there were able to get into them. A friend and I basically took over a few of the test servers, which prompted Gaia to lock them down and kick us off.

I don't remember email grabbing being a part of it though, although we could grab emails of anyone on the test server, I just don't remember whether that had a direct link to Gaia's main functional servers.

I'm pretty sure the email exploit you're thinking of was the one in GSI though.
Jovan made a video demonstrating it.
That program definitely utilized GSI, I don't remember what method it was though.

There's still huge lists of emails that were acquired back then going around. I remember some lames in Rally trying to sell them.

I wish there was an easy way to figure out someone's e-mail without hacking them and/or asking them directly. Bl