Discover Habbo's history
Treat yourself with a Secret Santa gift.... of a random Wiki page for you to start exploring Habbo's history!
Happy holidays!
Celebrate with us at Habbox on the hotel, on our Forum and right here!
Join Habbox!
One of us! One of us! Click here to see the roles you could take as part of the Habbox community!


Page 1 of 2 12 LastLast
Results 1 to 10 of 11
  1. #1
    Join Date
    Nov 2005
    Location
    Edinburgh
    Posts
    11,690
    Tokens
    0
    Habbo
    Pyroka

    Latest Awards:

    Default habohut forums hacked

    basically if you had a username with the same pw as your habbo on habbohut forums then best changhe it, just got this through from habbohut:

    GG HabboHut,

    Owned by the JpK crew.

    - Forum has been mysql injected
    - administration has been logged
    - forum database has been downloaded

    GG

    [JpK];;
    FOR THE LULZ. i dont think anyone goes on habbohut so like what the hell lol. AND IT IS NEWS CUZ... NOBODY KNEW


    Edited by Catzsy [Forum Super Moderator]: Moved from Habbo News to Habbo in General as it not actual news about the hotel. Thanks.
    Last edited by Catzsy; 02-07-2009 at 09:52 AM.

  2. #2
    Join Date
    Aug 2005
    Location
    Brum
    Posts
    4,743
    Tokens
    0

    Latest Awards:

    Default

    habbohut was big like 4 years ago its not as big as it used to be i didnt even know it had a forum

  3. #3
    Join Date
    Jul 2009
    Posts
    34
    Tokens
    0

    Default

    Yeah the forums pretty dead beat anyway, but its a damn shame.

  4. #4
    Join Date
    Jul 2006
    Location
    devonshire
    Posts
    16,952
    Tokens
    0

    Latest Awards:

    Default

    didnt even know it was still open, lol.

  5. #5
    Join Date
    May 2009
    Posts
    1,576
    Tokens
    0

    Latest Awards:

    Default

    yeah thought they closed last year lol?

  6. #6
    Join Date
    Dec 2007
    Location
    South Wales
    Posts
    8,753
    Tokens
    3,746

    Latest Awards:

    Default

    hackers r so cool these days
    "There are only two important days in your life: the day you are born, and the day you find out why."
    Mark Twain


  7. #7
    Join Date
    Jun 2008
    Posts
    3,435
    Tokens
    1,831

    Latest Awards:

    Default

    habbohut is open? lmao

  8. #8
    Join Date
    Jul 2006
    Location
    UK
    Posts
    11,985
    Tokens
    624

    Latest Awards:

    Default

    oh well everyone on there was obnoxious anyway

  9. #9
    Join Date
    Jun 2009
    Posts
    69
    Tokens
    0

    Default

    Oh bless their cotton socks.

    Quote Originally Posted by hackers
    - Forum has been mysql injected
    - administration has been logged
    - forum database has been downloaded
    vBulletin has no exploit in which you can MySQL inject, unless HabboHut have coded some rubbish. system which went vulnerable. Administration has been logged? The only way you can keylog through a website, is keylog the login box - which would mean, it's not the Administration being logged, it's the whole of the website's login? Forum Database, whoop de doop. They can do nothing with the database, due to the fact all your passwords are encrypted and they seem too nooby to decrypt passwords. :eusa_danc

    My guess is, they somehow got access to the website (maybe an exploit on the actual fansite, not the forum) or something, uploaded a shell and kept it there. Went on the shell, got the configuration details, entered the MySQL password, made their user administrator and 'hack' the Forums. JpK? They're not hackers. SIMPLE.
    Exploiting is not the same as hacking, idiots.
    Last edited by Axed; 02-07-2009 at 09:43 AM.

  10. #10
    Join Date
    Jun 2008
    Location
    Manchester
    Posts
    766
    Tokens
    0

    Default

    Quote Originally Posted by Axed View Post
    Oh bless their cotton socks.



    vBulletin has no exploit in which you can MySQL inject, unless HabboHut have coded some rubbish. system which went vulnerable. Administration has been logged? The only way you can keylog through a website, is keylog the login box - which would mean, it's not the Administration being logged, it's the whole of the website's login? Forum Database, whoop de doop. They can do nothing with the database, due to the fact all your passwords are encrypted and they seem too nooby to decrypt passwords. :eusa_danc

    My guess is, they somehow got access to the website (maybe an exploit on the actual fansite, not the forum) or something, uploaded a shell and kept it there. Went on the shell, got the configuration details, entered the MySQL password, made their user administrator and 'hack' the Forums. JpK? They're not hackers. SIMPLE.
    Exploiting is not the same as hacking, idiots.
    Hacking is a loose term for many things today, including social engineering which is how access to the site was obtained.

Page 1 of 2 12 LastLast

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •