Operation Twirape: Difference between revisions
>DalekLord No edit summary |
>DalekLord |
||
| Line 73: | Line 73: | ||
Yahoo therock_247uk@yahoo.co.uk <br> | Yahoo therock_247uk@yahoo.co.uk <br> | ||
<br> | <br> | ||
LOL MY WINDOWS LIVE CONTACTS WERE ALL DELETED AND MY NEW NAME IS FILTHY_KIKE | |||
=== georginatena === | === georginatena === | ||
Revision as of 05:17, 14 May 2010
| WARNING This article is being watched actively by non-Anons such as the target Do not put sensitive information such as passwords on the page; however, dox and most raid details are just fine, and messages may be addressed to the lurkers. |
 |
Twifags
| Date | May 2010 |
| Target | The Twilight Forums |
| Casus belli | The crime of existing. |
| Result | n/a |
| IRC | |
| /i/ 1 | |
| /i/ 2 |
ATTENTION COMRADES
Need /b/lackup. all Red Army soldiers add ComradeEdward the instant you get an account. LET OUR MOTHERLAND CRUSH THEM INTO NOTHING!!!
Twifag ruin: Round 2
After the massively successful raid on twilighters.org we are continuing our crusade against the jizzstain that are twifaggots on the internet. We will not stop until they are all scared shitless to start another fucking stupid fansite or post about their retarded obsessions with Jacob's dick.
Our new target is The Twilight Forums
What we know:
They have an IRC network at irc.ipocalypse.net It's run by some faggot named Eric who is also apparently in charge of the server. It also hosts ipocalypse.net and hpforums.org
How you can help:
- Troll them mercilessly on the forums.
- Dox them, and refer to this for further tactics
- If you're a 1337 h4x0r on steroids join irc.partyvan.info #twirape / #808 on irc.tr0ll.us or irc://irc.helldive.org/twifags if you're a faggot.
- phpBB 3.0.6 appears to be outdated (current is at least 3.0.7)
- Make them cry/puke/feel pain
As always, current information can be found on IRC. Rest assured we have 1337 skiddies working around the clock to h4x them, but we can't do it without YOUR help.
Dox/IP Addresses
therock247uk
Name: Sean Roe
Date of Birth: 14 Dec, 1986
IP address: 82.9.89.46
Mother: Angela K. Roe
Tel: (01636) 650312
Location: 18 Whitfield Street, Newark, NG24 1QX
Host name:cpc2-nwrk3-0-0cust301.nott.cable.ntl.com
Status: Ipocalypse.net administrator
twitter: http://anonym.to/?http://twitter.com/therock247uk
facebook: http://anonym.to/?http://www.facebook.com/therock247uk
Myspace: http://anonym.to/?http://www.myspace.com/therock247uk
deviantART: http://anonym.to/?http://therock247uk.deviantart.com
x-fire: http://anonym.to/?http://www.xfire.com/profile/therock247uk
Ebay: http://anonym.to/?http://myworld.ebay.com/therock247uk/
Netlog: http://anonym.to/?http://en.netlog.com/therock247uk
his site: http://anonym.to/?http://www.247fixes.com
AIM therock247uk
MSN therock_247uk@yahoo.co.uk
Yahoo therock_247uk@yahoo.co.uk
LOL MY WINDOWS LIVE CONTACTS WERE ALL DELETED AND MY NEW NAME IS FILTHY_KIKE
georginatena
old DOX for twilighters.org - 174.133.163.66
blutiara@hotmail.com
Georgina Tena
3288 Bruce Dr
City:Fremont
State/Province:CA
Postal Code:94536 US
Phone:+1.5104493034
Testing: begin_of_the_skype_highlighting +1.5104493034 end_of_the_skype_highlighting
FAX:+1.5104493034
myspace: http://anonym.to/http://www.myspace.com/geo-gurl
twitter: http://anonym.to/http://twitter.com/geogurl
facebook: http://anonym.to/http://www.facebook.com/geogurl
jewTUBE-channle: http://anonym.to/http://www.youtube.com/user/georginatena
her site: http://anonym.to/http://georginatena.com/
enjoin my cPanel https://174.133.163.66:2083/
-will be updated with moar info
Nikto Scans
thetwilightforums.com
- Nikto v2.1.1
+ Target IP: 62.212.84.82 + Target Hostname: thetwilightforums.com + Target Port: 80 + Start Time: 2010-05-12 19:30:47
+ Server: lighttpd/1.4.19
+ No CGI Directories found (use '-C all' to force check all possible dirs)
+ Retrieved X-Powered-By header: PHP/5.2.6-1+lenny6
+ lighttpd/1.4.19 appears to be outdated (current is at least 1.4.23)
+ Allowed HTTP Methods: OPTIONS, GET, HEAD, POST
+ /config.php: PHP Config file may contain database IDs and passwords.
+ OSVDB-12184: /index.php?=PHPB8B5F2A0-3C92-11d3-A3A9-4C7B08C10000: PHP reveals potentially sensitive information via certain HTTP requests which contain
specif ic QUERY strings.
+ OSVDB-561: /server-status: This reveals Apache information. Comment out approp riate line in httpd.conf or restrict access to allowed hosts.
+ OSVDB-3092: /adm/: This might be interesting...
+ OSVDB-3092: /download/: This might be interesting...
+ OSVDB-3092: /files/: This might be interesting...
+ OSVDB-3092: /includes/: This might be interesting...
+ OSVDB-3092: /phpmyadmin/: phpMyAdmin is for managing MySQL databases, and shou ld be protected or limited to authorized hosts.
+ OSVDB-3092: /store/: This might be interesting...
+ OSVDB-3268: /docs/: Directory indexing is enabled: /docs
+ OSVDB-3268: /styles/: Directory indexing is enabled: /styles
+ 3823 items checked: 14 item(s) reported on remote host
+ End Time:
Ports
22/tcp open ssh OpenSSH 5.1p1 Debian 5 (protocol 2.0).
53/tcp open domain ISC BIND 9.5.1-P3.
80/tcp open http lighttpd 1.4.19.
111/tcp open rpcbind 2 (rpc #100000).
Vulns
RE: BIND on :53
Reported by NVT "ISC BIND 9 DNSSEC Query Response Additional Section Remote Cache Poisoning Vulnerability" (1.3.6.1.4.1.25623.1.0.100362):
Overview:
ISC BIND 9 is prone to a remote cache-poisoning vulnerability. An attacker may leverage this issue to manipulate cache data,potentially facilitating man-in-the-middle, site-impersonation, or denial-of-service attacks.
Versions prior to the following are vulnerable:
BIND 9.4.3-P4 BIND 9.5.2-P1 BIND 9.6.1-P2
References:
http://anonym.to/?http://www.securityfocus.com/bid/37118
http://anonym.to/?https://www.isc.org/node/504
http://anonym.to/?http://www.isc.org/products/BIND/
CVE : CVE-2009-4022
BID : 37118
Methods
Bandwidth Raep
List:
first List
http://anonymous.pastebay.com/98281
Tool:
Example of win against twifags
Lulzy Quotes
"alright. you know its acutally great that we have info now. we had none yesturday and i was alone with the hacker for an hour :( it was sad and gross. but soph saved the day!!! your a great mod. and chris you did a good job too, because i didn't think the hacker deleting everything could be fixed" - User a&k:] of twilighters.org, proving good english skill having of
"Anyway lets get to the interesting part of this post (as if there is one). If you don't already know; I was hacked. More specifically my facebook, twilighters and twitter account was hacked. Terrifying I know. Anyway my facebook is now disabled. My old twitter account was deleted and my twilighters account recovered." - sparkleswan, global mod of twilighters.org, notice that PEOPLE THAT CARE and ABOUT ME are definitively separated on the page
"Completely random here, but in relation to the fact that the threads title is hacker haters, I just thought I'd give you an update. After they hacked my emails and every other thing under the sun, we were forced to get the police involved, and according to the police, they believe it's a group of paedophiles working from overseas. Joy. But yeah, just thought I'd let you know that the police are after them. :) " - DaisyHatesHackers, expert hacker analyst, providing definitive proof that Interpol is after the hackers
