spacetimestudios.com_8m_bcrypt.rar
Database World ROCThis page documents a data breach listing tracked by Breach House. It summarizes the publicly advertised leak attributed to Database World ROC, including the affected entity, origin and the date the listing was first indexed.
Breach Overview
So the story behind this hack was pretty epic. Believe it or not it started with sqlidumper however no sqli was used. See sqlidumper has a fairly solid engine for detecting local file inclusions. I had scraped 10k gaming related domains from onrpg.com and I parsed out parameterized urls for all of them and and ran them in the LFI checker in sqlidumper. I got only 1 valid. It was a promotional domain for one of spacetimestudios.com mmorpg games. I checked it out and I realized it wasn’t just an arbitrary read but a true local file inclusions. That is to say it was actually including arbitrary php files and executing them from a url parameter. I had read about URL poisioning and wanted to try it and this was a perfect opportunity so I took a list of common log file paths and spammed them to the LFI until I got a hit on an Apache error_log. Apache error_log files include the user agent of the client that made the request. So I fired up burp suite and I injected a php one liner that would execute a system command for me. You see because of the nature of a true LFI, if you are able to include a line you wrote yourself from literally any source, when it gets included it executes the line as valid php code. This means that all I had to do was trigger an error of any kind and inject php code in my user agent and it would get recorded to the error_log, then once the error_log is included in the LFI it gets executed. So I requested domain.com/penis which triggered a 404 and I modified the user agent with a oneliner php command that executed a curl request to shell code I had hosted on GitHub and it saved it to a php shell. That’s how I got the first remote code execution.... read more in https://femboyforum.com/t/spacetimestudios+com+full+db+8kk+users+exclusive+free+security+write+up download link: https://1drv.ms/u/c/a9548ec4c6564df1/IQCesJ9h9Id8TKGJai504EOjAaxPjVxlS6EBveAGbBsY0zI source: https://femboyforum.com/t/spacetimestudios+com+full+db+8kk+users+exclusive+free+security+write+up