From 26C3 Public Wiki

Jump to: navigation, search

Hacked

Contents

Login

anonymous2/2342

Anonymous/anonymous3

Foodhacks

(If you would like to thank me/talk to me, just contact mathias_ on #26c3@freenode - maybe bring me that second big king xxl you left over or a bottle of mate/beer? ;)

I'd get you a beer if you give us the source... --Bugmenot 21:12, 27 December 2009 (CET))

You can generate your own vouchers on Burger-king.de, but you can only get 4 on a DinA4-pages, and even worse: you cant select all vouchers that are on their servers. Also you need to register on their site. All of the vouchers used to work (they changed the format of the vouchers, and some are really a good deal (mid-sized fries for 50 Cent i.e.).

Store them on your smartphone, ebook reader, scrap paper, skin, ....

You can also print them out, of course, but where's the fun in that? Please don't ask the Ministry of Information if you don't have a printer.

  • The "Asia Gourmet" Shop in the Station Alexanderplatz is giving 50c Discount on everything >5€, if you show your congress badge.

@ The CON

Rickroll Armee Fraktion - Dan Kaminsky trolling

Free Downloads

Harzflirt.de

flirt-datings.de

unaone Hoster

  • user: 23317-24641b-ftp
  • pass: retep
  • host: ftp.unaone.net

Nazi-KFZ-Kennzeichen, anyone?

http://picpaste.de/photo_1230999651.jpg (FIXED)

NPD Fraktion Sachsen

forum.deutsche-armee.com

Blöd, wenn Leute in der Flirt-Börse den gleichen Mail-Account verwenden wie für die Organisation ihrer politischen Aktivitäten UND DAS GLEICHE PASSWORD noch dazu!

Ich hätte hier eine nette Nazi-Seite anzubieten. Könnte bitte jemand einen Torrent draus machen? Tausend Dank!

phpbb mysql-dump: 1. http://rapidshare.com/files/328310266/backup_1262192175_23b69906890bfe3d.sql.gz.html

Den Blog hätt ich auch noch: 2. http://rapidshare.com/files/328309942/wordpress.2009-12-30.xml.tar.gz.html

XSS

Please do not poste too much lame XSS. Real hacks desired! 

 Input: "><script>alert("26C3 FTW!")</script><script

 Input: '><script>alert("26C3 FTW!")</script>

spread the word

Targets

See Hacked/Targets

Insecure Passwords

File Inclusions

SQL Injections

[4]

  • Any further information?
    • Database dump in progress :-) Using sqlmap?
  • steelers.de
  • utopolis.lu (User passwords in cleartext (not even hashed), full addresses, cellphone and telephone numbers, etc...)
    • dump?

Happy little cloud

Retrieved from "http://events.ccc.de/congress/2009/wiki/Hacked"