XSS Attack

Poor console codez... I could have done worse, but injecting SQL is illegal and using html isn't. The reason I did it was because I found out from a Moderator there that he was stealing credit for Johnny's VIP codes. XSS is powerful. I didn't really want to do anything too destructive, I just wanted to teach him a lesson on not upgrading his VBulletin. If I was really malicious, I could have injected SQL to make me an administrator and delete everything, but I'm nice and wanted to contribute to my favorite site, by bringing in more visitors to Console Discussions, as Console Codez, now redirects to Console Discussions. =]

Not only did they steal Johnny's codes, but they also stole the theme and banner from Johnny.

http://img541.imageshack.us/img541/8264/hack1.jpg

http://img231.imageshack.us/img231/6061/hack2d.jpg

EPIC THREAD IS EPIC.

That's a fucking win there. Use our shit on our site and take credit for it? I think not. >_>

Pwnage,
Repping all the way!

Yea I banned Immortal as well. YoMom was able to screenshot the VIP area and the post where he stole credit. So I know for sure that Immortal was stealing codes and then taking credit for those stolen codes.

I made that banner for him.:o

Quote:

---

Originally Posted by CoDeX

I made that banner for him.:o

---

Treacherous fiend!

Burn the witch! D:

Wow Immortal is retarded... He isn't even aware that the exploit was made through VBulletin's ModCP's Announcements. All he had to do was remove the announcement. Instead he thought the whole site was fucked so he removes the site and starts from scratch... What a nub.

shit, and I helped him with the layout of the forums.

Anyway. Epic!