soulbleed Posted July 31, 2009 Share Posted July 31, 2009 Just got this in an email from hacking-lab.com. Apparently whoever hacked Kevin Mitnick, also hacked Hak.5. http://antilimit.net/CENSORED.txt It's a pretty interesting reading. This might be old news, but I haven't been around on the Hak.5 forums lately. Apparently it was a hacker group called ZF0. Quote Link to comment Share on other sites More sharing options...
jzman Posted July 31, 2009 Share Posted July 31, 2009 You are correct. If you find the file please do not repost it. Some noobs can mis-use the file for their douchebag ways. --jzman Quote Link to comment Share on other sites More sharing options...
digip Posted July 31, 2009 Share Posted July 31, 2009 Security through obscurity....not reposting does nothing. A google search brings it up pretty much right away. I think people need to know its out there so they change them damn passwords!! EVERYONE's from the forum was posted in plain text, so I can't stress that enough that people need to change them here, and wherever else they may have used them. Quote Link to comment Share on other sites More sharing options...
psydT0ne Posted July 31, 2009 Share Posted July 31, 2009 i abhorr violence but in this case tek screwing their testicles to a sheet of gyprock would be a nice punishment to these dickheads. Quote Link to comment Share on other sites More sharing options...
wh1t3 and n3rdy Posted July 31, 2009 Share Posted July 31, 2009 Yeah i'm up for giving them a hiding. Quote Link to comment Share on other sites More sharing options...
digip Posted July 31, 2009 Share Posted July 31, 2009 Thing is there is the anti-sec movement, and then those who claim they do it in name of anti-sec. Im not sure it makes a difference, as both seem to be at conflict with each other. The real people of the anti-sec movement and then those script kiddies the anti-sec people are against going in and defacing sites just under the movement of antisec adds this whole other level of irony, especially when its so called hackers attackign hackers.(or as they ati-sec people say, they were never hackers in the first place). I think we are only seeing the tip of the iceburg and the sinking of the Titanic has yet to come. Quote Link to comment Share on other sites More sharing options...
psydT0ne Posted July 31, 2009 Share Posted July 31, 2009 I'd still like to think that they (the dickheads) are still going to get their asses handed to them through ....oh i dunno a ritualistic shallow grave beat down...underbelly style. Quote Link to comment Share on other sites More sharing options...
VaKo Posted July 31, 2009 Share Posted July 31, 2009 Not a great deal you can do in this case, best responce is to get a proper understanding of what went wrong and prevent this line of attack working again. Quote Link to comment Share on other sites More sharing options...
dr0p Posted July 31, 2009 Share Posted July 31, 2009 Am I the only one who isn't pissed off by this? Yes, they hacked hak5, who cares? If anything I would give them props for pulling off a few pretty nice hacks and they didn't cause anyone real damage. It's pretty ironic to me how everyone is condemning them for doing what we all enjoy doing, just hacking and exploring. Quote Link to comment Share on other sites More sharing options...
VaKo Posted July 31, 2009 Share Posted July 31, 2009 Breaking into a server, yes, that is "just hacking and exploring". Defacing a site, this is kinda "just hacking and exploring" if you can push a good argument. But breaking into a server, defacing it and then opting to rm -rf / the entire server which also hosts 80+ sites in addition to the one your after... this is not "just hacking and exploring". Quote Link to comment Share on other sites More sharing options...
dr0p Posted July 31, 2009 Share Posted July 31, 2009 Which server(s) did they rm? I thought they left the servers alone aside from the defacements. Quote Link to comment Share on other sites More sharing options...
VaKo Posted July 31, 2009 Share Posted July 31, 2009 The attackers rm'd the server that was hosting hak5.org Quote Link to comment Share on other sites More sharing options...
digip Posted July 31, 2009 Share Posted July 31, 2009 Which server(s) did they rm? I thought they left the servers alone aside from the defacements. Along with RM'ing the servers they posted all of the servers contents as well as everyones passwords, plus went as far as to basically insult the entire community here at hak5, not just the hosts. Basically, the owned the servers and then gave "full disclosure" of everything, including passwords, directory structure, then deleted everyones stuff. On top of attackign hak5, they went searching against the passwords of its users, like Mubix, who had his gmail and blog logged into by these people. Its only a matter of time before they hit others from the forums, and I for one am suprised more people from the forums have not had their stuff attacked yet. These aren't anti-sec or hackers in my mind as much as it was some asshat with script kiddy skills who knew of an exploit for a flaw in the web server. And who claims they did it? Its not like zf0 is a person, its a zine of public hacks, not the person who did it. I hope that there is at least a trail back to this person(s). People like that can't keep a secret, they brag about it to everyone, so its only a matter of time before the real person behind it gets ousted. Quote Link to comment Share on other sites More sharing options...
Brian Sierakowski Posted July 31, 2009 Share Posted July 31, 2009 I think we should make the list public, I googled the txt file and I saw that one of my old passwords was on there that I cross referenced on my firefox list.... still was in use on a few sites. Be sure that NONE of the passwords you have ever used on here show up anywhere else. Quote Link to comment Share on other sites More sharing options...
deleted Posted August 1, 2009 Share Posted August 1, 2009 I just googled/found the text file. Thank God only my old password (from 2007) was on it *few* Quote Link to comment Share on other sites More sharing options...
beakmyn Posted August 1, 2009 Share Posted August 1, 2009 I'm now using keepass with a random 20 character upper/lower/digit/extra spicy password for all my logins. I don't know why I didn't use it sooner. Quote Link to comment Share on other sites More sharing options...
Brian Sierakowski Posted August 1, 2009 Share Posted August 1, 2009 I'm now using keepass with a random 20 character upper/lower/digit/extra spicy password for all my logins. I don't know why I didn't use it sooner. Same, I'm using a firefox plugin to do the same. Used my firefox saved passwords to look up all the sites with the same or similar passwords, then changed it to random stuff. Security 101 I know... but looks like even the best of us make mistakes. Quote Link to comment Share on other sites More sharing options...
SWFu Posted August 1, 2009 Share Posted August 1, 2009 I feel sorry for the legitmate users sites that were hosted on the same server (were they rm'ed also matt?) I now think that a dedicated server for hak5 is the way to go. Hey, what do I know this password might be still sniffed.... edit Oh yeah, not that it's worth a wank (brit speak) SSL might help! I wonder how many other sites a username:password / email:password list is running on. Quote Link to comment Share on other sites More sharing options...
digip Posted August 1, 2009 Share Posted August 1, 2009 Keepass is ok if you need it, but it would not have saved anyone in this scenario since they were basically sniffing them in realtime. Quote Link to comment Share on other sites More sharing options...
SWFu Posted August 1, 2009 Share Posted August 1, 2009 "There is no spoon." was my favorite :) Quote Link to comment Share on other sites More sharing options...
SWFu Posted August 1, 2009 Share Posted August 1, 2009 I just googled/found the text file. Thank God only my old password (from 2007) was on it *few* But i gather that the passwords were sniffed from June onwards? Quote Link to comment Share on other sites More sharing options...
Brian Sierakowski Posted August 1, 2009 Share Posted August 1, 2009 Keepass is ok if you need it, but it would not have saved anyone in this scenario since they were basically sniffing them in realtime. The passwords would have been compromised, but you would be assured that you aren't being foolish and using the same password in two places. If the server gets rooted... its rooted, but at least we can do damage control on our other accounts so we don't get mubixed. Not that they would have any interest in what I'm doing anyway. Quote Link to comment Share on other sites More sharing options...
Seshan Posted August 1, 2009 Share Posted August 1, 2009 Keepass is ok if you need it, but it would not have saved anyone in this scenario since they were basically sniffing them in realtime. That's what I don't get, One of my old passwords was in there. So how long where they sniffing? I also think there is two versions, or at least some edited ones, When I used google cache to find the leetupload one because it was no longer there, my username wasn't in that one. I think it's safe to say if you have logged in in the last month, you pass is out there. Quote Link to comment Share on other sites More sharing options...
h3%5kr3w Posted August 1, 2009 Share Posted August 1, 2009 I noticed that there was even a password... um... variation of a password in there that I never used... wow this is a freaky thing to read... Quote Link to comment Share on other sites More sharing options...
digip Posted August 2, 2009 Share Posted August 2, 2009 I wonder if it really was prdelka or anyone from the whitehate crowd. Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.