MOD-Zippy hacked!

[Clasus]

www.habbo.co.uk/home/MOD-Zippy :O:O:O

[chaos-man2006]

How did you find out about this?

[Boxiel]

omg :O

[Clasus]

i was told

[chaos-man2006]

hmmm i wonder if it is true:O:S

[Clasus]

lol well a mod wouldnt go around putting i got owned by ross would he lol

[Boxiel]

Heidster just comfirmed that it ISNT true..

[chaos-man2006]

Heidster just comfirmed that it ISNT true..
i no i just went to his room anyway lol

[scubadiva]

lol. The beast from the East?

[Clasus]

LOL why has he got Ross was ere on his homepage etc?

[Kardan]

hmmm i wonder if it is true:O:S

I doubt a real moderator would put what stickes are on that page.

[Ashton]

Just some Childish nub thinking hes cool because hes Hacked a Mod

[myke]

On Sunday.'s home:
http://i11.tinypic.com/676982a.png

[Clasus]

lmao syrupy +rep for showing that

[Framed]

I believe it.

[Ashton]

Well done Max :)

[Clasus]

ashton lol its a joke u idiot lols

Edited by micky.blue.eyes (Super Moderator): Please don't be rude towards other members.

[Ashton]

I was been sarcastic.

[Diesel]

He is now offline, and all the notes have been removed.

[myke]

People are already speculating like "OMGG IT WAS SO AND SO" :/

There's like a massive group looking for Zippy...

http://i14.tinypic.com/4vfi4q9.png

[dannyisnotamazing]

lmao if this is true.

[Clasus]

Habbo are trying to cover it up lol

[le harry]

Probaly a personal joke

[Brap]

its true its done by stealing cookies

[Boxiel]

Habbo are trying to cover it up lol



Wouldnt you?

[Robby]

LOL he just changed looks :P

[le harry]

LOL, Mod getting hacked. Classic.

[Clasus]

Yeh i spose i would try and cover it up XD But still, i think it was from session stealing

[le harry]

Whats session stealing

[Brap]

summit tht haks peeps

also mod-scor got done aswell

[Clasus]

Its where you go on a website, and then the person who has put the session stealer on it, see's the Session ID and types it in somewhere, then they are able to get onto the homepage of the person they have done it to, and if the person hasnt been signed in for more than 10 mins, they can actaully go on their habbo

[Robby]

MOD-Scor went around picking some furni up lol

[Clasus]

yeh but ross didnt actaully get any of it

[CrazyColaist]

They all bloody deserve it.

[le harry]

Karma for screwing around trax lol.

[Jcshua]

Could of used Session stealer and got his Session when he logged out. Then being able to mess with his habbo home but not enter the hotel.

[le harry]

Yet apparently they got MOD-Scor and he picked up furni?

[Clasus]

Yes because if you session steal and the person you did it to hasnt logged into the hotel any more than 10 mins, you can access the hotel

[Brap]

"he" got mod-scor and zippy, they used a session stealer thts the end close thread

[Kent]

......

Edited by micky.blue.eyes (Super Moderator): Please don't create pointless posts.

[le harry]

Surely Habbo can patch this?

[Kent]

no they cant

[Brap]

hi *Removed* shame u ddint have enuff time to pick furniz up

Edited by Nick- (Forum Super Moderator): Please do not avoid the filter.

[le harry]

Who are you talking to =/

[Brap]

the hakker

[Eckuii]

lol when >Max< got onto Mod-Alpha's account back in the day and went and picked loads of furni up from rooms, picked up loads of furni off Jibbi LOL

wont be the first time a Moderator has been hacked.

[myke]

Tbh, the mods are moaning at us "keep your account safe" whereas, they don't do a very good job, eh?

[sim]

Yes but Session Stealing is very easy to catch. Basically don't go to any websites, and THEN you will be safe =/

[le harry]

Wow, thats pretty easy. Not visit any websites.

[Brap]

INIT :)

[-:Undertaker:-]

Not Sulake's best week is it?

[MrCorny]

Not Sulake's best week is it?

Lol, it don't appear to be.

[Never]

Somebody says go to a site, you go. Looks like a normal website, fansite or whatever. In the coding it will have a code, that gets your Habbo session. You wont even know.

Habbo is stuck now.

[Kardan]

Tbh, the mods are moaning at us "keep your account safe" whereas, they don't do a very good job, eh?

It's virtually impossible to be safe from session stealing.

Visit a website, you can get your account taken.

[Never]

It's virtually impossible to be safe from session stealing.

Visit a website, you can get your account taken.

Yep, it's true read above Kardans post!

[PenguinFluid]

dont go on websites when your on habbo :)

[le harry]

dont go on websites when your on habbo :)

That's a tad hard for me :8

[.:TeamAmerica:.]

PMSL!!! HA HA!!!

Legendary stuff.

Staff will say their MOD's aint got hacked for a couple of reasons.
1. To stop people worring like, "OMG MOD HAS BIN AXED! LOK RUMS N LIFT FERNI!"
2. So people dont think their serurity and stuff aint flawed.

[chaos-man2006]

mod-zippy was not hacked comfirmed by heidster and if you check his rooms there all full of furni!:)

[Kent]

Why would I pick up furni from his room when I could pick it up from anyones?

[Kent]

and Heidster used some crap about a new quest starting so habbos security didn't look as crap as it actually is.

[dannyisnotamazing]

dont go on websites when your on habbo :)
..only Habbo addicts would do that. "/.

Just to come on the net to use Habbo only, no other sites lmao. :S

Habbo can fix the XSS flaw if they try..

[Invent]

Go on Habbo.co.uk, in the address bar paste: javascript:alert(document.cookie);

The "hacker" gets that sent to his email. He can use the JSSessionID to get into your account.

[Never]

Go on Habbo.co.uk, in the address bar paste: javascript:alert(document.cookie);

The "hacker" gets that sent to his email. He can use the JSSessionID to get into your account.

How's that send it to his email?!

edit: o ya dont matter.

[Invent]

Some things in Habbo allow you to specify the data in say an input form by doing "?formname=">+javascript code" or something, lol.

[Never]

Oh interesting...

How would Habbo patch this?

[Jam]

Oh interesting...

How would Habbo patch this?

bobba It Knowing Them! Lol, Nice Find.

[Niall!]

bobba It Knowing Them! Lol, Nice Find.

LOLOLOL

Im gonna be a little more carefull from now on xD

But not be a habbo addict and not visit sites lolol

[Bill]

Both of those MOD's signed my guestbook.


habbo.co.uk/home/bill

[timROGERS]

It's very easy to patch, just filter the input for the GET variables :) What I don't know is how the session ID is gonna help them to touch your account.

[Framed]

Go on Habbo.co.uk, in the address bar paste: javascript:alert(document.cookie);

The "hacker" gets that sent to his email. He can use the JSSessionID to get into your account.

No, their ID gets sent to their webpage if they are using the method I know of.

[e5..]

beast from the east aka Kent ;) (aka ross)

[Kent]

bill the reason I commented on your homepage was to show what you helped me do. With you reporting the site, the moderator has to check what is wrong with you. And from a long time player like yourself who is trusted, mods would think nothing of it. Allowing me to get their session and get on their account. So thanks a lot bill - love your friend Ross tricked you on the account (victoria)

[Shawnstra]

Oh cool :P

[crans]

A smart person who goes on a mod acc would do :alert and alert there "session stealer site" or "fake login" or w/e

cause you know for a fact you'll have barely anytime for anything.

[Zuar]

or you could just pick up some supers?

[ILUVULONGTYM]

or you could just pick up some supers?
mm ye lol

[A4AOwen]

bill the reason I commented on your homepage was to show what you helped me do. With you reporting the site, the moderator has to check what is wrong with you. And from a long time player like yourself who is trusted, mods would think nothing of it. Allowing me to get their session and get on their account. So thanks a lot bill - love your friend Ross tricked you on the account (victoria)

Nice move.

[Framed]

bill the reason I commented on your homepage was to show what you helped me do. With you reporting the site, the moderator has to check what is wrong with you. And from a long time player like yourself who is trusted, mods would think nothing of it. Allowing me to get their session and get on their account. So thanks a lot bill - love your friend Ross tricked you on the account (victoria)

haha! Awesome.

[Flumples]

Tbh Habbo's security is surprisingly crap for such a big company and it's been exposed now. The ammount of money some people spend on Habbo, it's shocking.

& hi ross.

[beth]

bill the reason I commented on your homepage was to show what you helped me do. With you reporting the site, the moderator has to check what is wrong with you. And from a long time player like yourself who is trusted, mods would think nothing of it. Allowing me to get their session and get on their account. So thanks a lot bill - love your friend Ross tricked you on the account (victoria)
LOL. owned.

[HotelUser]

He also hacked me. Stole my session and posted something bad about mod zippy, three mods were hacked.

This hacking method is know by Sulake and they won't do anything about it.
Disabling cookies will solve it but not allow the user to get on Habbo Hotel.
Using this hack won't allow the hacker to log onto habbo. The hacker can only edit home pages and such.

[Zuar]

He also hacked me. Stole my session and posted something bad about mod zippy, three mods were hacked.

This hacking method is know by Sulake and they won't do anything about it.
Disabling cookies will solve it but not allow the user to get on Habbo Hotel.
Using this hack won't allow the hacker to log onto habbo. The hacker can only edit home pages and such.

It's not a hack its a exploit. And its your own fault aswell tbh. Don't moan, get over it its pixels. Also sulake don't give a dam, they are to rich to care tbh. If I had that much money I wouldn't give a **** about some kid who got hacked. But anyway stop moaning and do something about it if your that bothered? All you get on this forum is "OMGZ A MOD IS HACKED HELP" or "HABBOZ R BEIN HAC0rZZZZ OH NOEZ" maybe it's time to get off your *** and do something? Or just not use habbo?

[timROGERS]

I don't know why Habbo don't just hurry up and fix it, given 5 minutes I could fix it myself. It's just a simple matter of filtering the GET variable.

[Framed]

He also hacked me. Stole my session and posted something bad about mod zippy, three mods were hacked.

This hacking method is know by Sulake and they won't do anything about it.
Disabling cookies will solve it but not allow the user to get on Habbo Hotel.
Using this hack won't allow the hacker to log onto habbo. The hacker can only edit home pages and such.

This "hack" can allow you to steal their furniture.

[You]

This "hack" can allow you to steal their furniture.
Not if the victim is clever enough to close all windows and re-log back in.

[ImNotPleke]

it woz me hu did it

the best from da west 2k7

Kent is a stupud moron

[le harry]

I don't know why Habbo don't just hurry up and fix it, given 5 minutes I could fix it myself. It's just a simple matter of filtering the GET variable.

I'm pretty sure if some Moderator on a Habbo Forum could do it in 5 minutes they would be able too to. So clearly it's a lot harder then that.

[HotelUser]

This "hack" can allow you to steal their furniture.

The cookie one does not allow you to get onto an account, I had 25thrones worth and it's all there. The hacker himself who even posted here told me that the hack he used to hack me didn't allow him to gain access to my furni.


It's not a hack its a exploit. And its your own fault aswell tbh. Don't moan, get over it its pixels. Also sulake don't give a dam, they are to rich to care tbh. If I had that much money I wouldn't give a **** about some kid who got hacked. But anyway stop moaning and do something about it if your that bothered? All you get on this forum is "OMGZ A MOD IS HACKED HELP" or "HABBOZ R BEIN HAC0rZZZZ OH NOEZ" maybe it's time to get off your *** and do something? Or just not use habbo?

I did not moan or complain. The hacker merely stole my session to edit homepages. Hardly to steal my stuff.