Return Styles: Pseud0ch, Terminal, Valhalla, NES, Geocities, Blue Moon. Entire thread

4chan hacked

Name: Anonymous 2014-04-23 11:07

someone gained access to moot's account and posted stickies on /int/. Apparently he doesn't like some tripfag there and is leaking their ip address and post history.

mods were deleting the stickies created by fake moot.

Now 4chan appears to be frozen. Look at /b/. No new posts appear.

Name: Anonymous 2014-04-23 11:32

Why would I give a shit about 4chan now?

Name: Anonymous 2014-04-23 12:04

Name: Anonymous 2014-04-23 12:59

Look at /b/.
I'd rather not.

Name: Anonymous 2014-04-23 13:02

Name: Anonymous 2014-04-23 13:21

So why is this thread here and not in /lounge/?

Name: Anonymous 2014-04-23 13:36

>>6
Well aren't you big and burly.

Name: Anonymous 2014-04-23 13:40

Name: Anonymous 2014-04-23 14:08

I wonder how the hack was done!

Name: Anonymous 2014-04-23 15:13

>>9
he probably tried some common passwords

Name: Anonymous 2014-04-23 16:56

>>10
I doubt it. Though christopher ``moot'' pole IS the guy who had #faggot for tripcode, I don't think a common password is what happened here. You have to be a special kind of dumbfuck to use a simple password for your 10+ years website.

Name: Anonymous 2014-04-23 18:03

sqli in the janitors page, you can quote me on this...

Name: Anonymous 2014-04-23 18:16

>>12
That sounds more likely. Was it an old feature or did they get hacked adding their new shiny features to 4chan? What a bunch of clumsy FAGGOTS.

Name: Anonymous 2014-04-23 20:34

>>8
For the love of god, don't use 4chandata.
https://archive.foolz.us/q/thread/712940/

Name: Anonymous 2014-04-24 1:24

If this doesn't belong in /lounge/ I don't know what does.

Name: Anonymous 2014-04-24 2:02

>>15
You do. How about you take this back to /lounge/!
*grabs dick*

Name: Anonymous 2014-04-24 5:29

sqli. whose the "expert programmer" now bitch?

Name: Anonymous 2014-04-24 8:35

I gather it's something in /reports/stats.php?days=
Here's a file claimed to be 4chans source. I haven't looked at it yet http://pastebin.com/a45dp3Q1
There is discussion about this paste being older than the hack but it must be somewhat relevant

Name: Anonymous 2014-04-24 9:42

Make him pay.

Name: Anonymous 2014-04-24 11:05

GET

Name: Anonymous 2014-04-24 13:10

POST

Name: Anonymous 2014-04-24 13:12

Hey guise, check my HEAD

Name: Anonymous 2014-04-24 18:30

Did they hax his anus too?

Name: Anonymous 2014-04-24 22:58

>>18
Man that code is terrible. Not sure what I was expecting but the spoiler parsing made me want to hurt someone.

Name: Anonymous 2014-04-25 0:02

>>23
Christopher Poole lay against the barrel in the darkness. His hands were bound by a particularly nasty twine that cut into his skin and left tiny bits of plastics in the irritated flesh. His feet were likewise bound, with the excess of those bindings running beneath the barrel to his hands. He had tried moving, but had only managed to slam his head against the concrete floor. To remind him of the embarrassing failure, blood ran from his eyebrow to his his nose, where the smell of iron bothered him.

Behind him, he heard a door open and a warm light flowed through the doorway. The warm light felt good on his naked body that had spent the last several hours shivering in a failed attempt to keep warm. `It must be daytime now', he thought, `I must have been here for hours.' The snap of a light switch lead the slow flickering of long disused fluorescent lights. The door closed and he was once again cold.

His captor's footsteps echoed in the concrete room, each time getting louder to poor moot, who was already terrified. He had had time to think of what he was going to say to the kidnapper, of the riches that he would promise him if he was released unharmed, but now that the time had come, he couldn't speak. He could sense someone directly behind him, even feel the body heat radiated. Moot kept waiting for what seemed like an hour (but, in reality, was only slightly more than thirty seconds) until-

`Hmm... I expected they'd be bigger. Well, I guess it is a little cold in here,' a soft, but assertive voice said.

Moot's eyes became as wide as saucers when he felt a gentle hand grab his scrotum and stretch the skin out to full size. He let out a small gasp. He suddenly found the will to speak.

`Stop, please,' he pleaded through tears, 'you don't have to do this! What is it that you want? I know many VCs tht can get you money and connections. I've got armies of camwhores that you can have! I swear that if you let me go now I won't tell-'. Moot let out a small scream that trailed off into a moan of agony as his testicle were clenched tight, the soft hands not damping the pain in the slightest.

`You dare try to bargain with me, you damn impostor? After you stole my life, even my family?' The captor twisted the nutsack in those soft hands, eliciting a new round of screams from moot. `My beloved fourchan, my wonderful canv.as, everything that I built! You stole them all from me! You, you, disgusting freak, how could you?'

The captor twisted and squeezed moot's genitals even farther than before. The bindings on his hands had broken the skin and blood dripped to the floor.

Then the hands became gentle again. They softly stroked moots bruised balls.

`But... we have to start the healing process somewhere, no? How about you start with the first thing you took, and give me access to my fourchan.'

`O-okay, if you let me get to a computer I can add you as a mo-'. His attempt to negotiate was cut short when a hard bitch-slap was delivered to his nuts.

`Why the fuck would I need a new account?', the soft voice was manic now, `I'm already moot! I demand you give back the one that is rightfully mine!'

Moot was still reeling from the slap from before. It took him a moment or too to comprehend this. He didn't want to give control of 4chan to this androgynous freak who was most certainly not-moot. But what if he struggled? Much more damage to the nuts and they would never heal. It was not a hard decision.

`My computer! The admin credentials are on my computer! I had it with me last night! Please, I beg you, let me go now!'

The captor stood up, as evidenced by the shadow, and said, "We'll see about that if the login works". Moot was then kicked directly in the asshole. The barrel rolled forward and smashed moots nose on the ground. And then he lost consciousness.

-----------------------------------

When he awoke, it was to a splash of water (he hoped) on his face. He was still tied to the barrel. He shook his head to remove the water and looked up. He was horror struck with what he saw.

In front of him was a tall ... thing... in nothing but a pink shirt. Their was white fur crudely glued to the face and skin with all the quality of a parody of a preschooler's crafts project. Where male genitals had obviously once existed were now a long scar with a small hole. Completely nullified. On the head was a set of misshapen crests that tried to approximate cat ears and had failed; whoever had done that hatchet-job had probably had Parkinson's disease and perhaps Down's syndrome.

The grotesque beast in front of him was much more terrifying than all the child mutilation porn threads that moot had secretly saved from /b/ combined. This thing... this abomination... thought that it was the mootcat!

`The login worked very well. No one suspected a thing! I'd thank you, but after all the time you were impersonating me, I think you should be apologizing instead. And I have the perfect way for you to atone...'

A creepy smile spread across the parts of the monster's face that still had working muscles. It brought what it was holding behind it's back into moot's range of vision. It held a large green rubber dick in both hands. It was half a meter long and a full ten centimeters in diameter. On it were dozens of large green bumps made out of a softer, more malleable type of rubber. Attached to the base of the giant cock was a strap-on holder. The abomination strapped the humongous dildo on and walked behind him.

The kidnapper leaned forward to speak in moots ear. Moot felt the length of the green penis along his back. If it were to go all the way in, it could puncture his lungs! The kidnapper breathed heavily into his ear, then stood up. Moot felt the tip, as large as a can of creamed corn, align against his anus in prepration of penitration. He began to sob.

`Are you ready to atone, impostor? I've waited a long time for this.'

And then moot knew the ultimate shame.

Name: Anonymous 2014-04-25 0:08

>>18

function append_ban($board, $ip) {
$cmd = "nohup /usr/local/bin/suid_run_global bin/appendban $board $ip >/dev/null 2>&1 &";
exec($cmd);
}


I mean, I guess this could make sense. I guess.

Name: Anonymous 2014-04-25 1:56

>>26
so, 4chan does not use sql or something?
how about shitchan or tablecat's thing?

Name: Anonymous 2014-04-25 2:07

>>27
There's SQL stuff all over the rest of the code, but a few functions like append_ban() stand out like this. My best guess is that /bin/appendban was designed to be used during DOS attacks, so it might touch routing tables, which would explain the existence of suid_run_global. I guess. I guess.

Please, if you can give me a rational explanation for why such a thing makes sense, do so.

Name: Anonymous 2014-04-25 4:32

>>27
Tablecat uses flat files, also it's in Perl.

Name: Anonymous 2014-04-25 5:13

flat file supremacy

Name: Anonymous 2014-04-25 13:12

>>25

Thank you so much

Name: Anonymous 2014-04-26 7:21

>>30
delicious flat file

Name: Anonymous 2014-04-26 12:53

>>18
he used grep to scan the source for vulnerabilities.
Found the one you posted was one he could use.
Then he bruteforced the directory structure, and made himself mod and also "manager". He had access for a week, which he used to find the female tripfaggot, observe her (responding to her own posts via the same IP, but without trip, in order to gain attention) and plan his actions out for the final day. I'd presume he also did more snooping on the structure of things. Impersonated moot for a bit and went on their IRC too.

He (or a pretender) has claimed to have gotten in again since, and said that the 4chan's staff's ``solution'' was to just delete fucking everything- most of the folders full of .php junk are gone now. He also said he's not done yet, so we'll see what comedic things happen.

Name: Anonymous 2014-04-26 23:17

>>33
``Hacking'' sure doesn't take much.

Newer Posts
Don't change these.
Name: Email:
Entire Thread Thread List