Loading....
- Hacker Uses XSS and Google Street View Data to Determine Physical Location
- CAnCAn te iubim, CA CA tine nu gasim. Superfete.cancan.ro e de rahat
- Deface (?!?) pe Cotidianul.ro
- Virusi in clipuri video [how to]
- Cyber-Bullying – palma parinteasca a noului mileniu
- Christopher “moot” Poole: The case for anonymity online
- Wtf Avira?
- Some old story about tagged.com
- Pwning cam girls for fun
- Tabloshit
Loading....
- Yahoo! again - XSS in Uncategorized (357 Visits)
- Yahoo! again - bad settings? in Uncategorized (252 Visits)
- Fanii nostri in Uncategorized (183 Visits)
- Frustrant in Uncategorized (146 Visits)
- La multi ani România, la multi ani românilor in Uncategorized (137 Visits)
- Weblog.ro - Shell via Local File Inclusion in Uncategorized (119 Visits)
- Yahoo! epic fail - permanent xss unleashed in Uncategorized (50 Visits)
- ... in Uncategorized (38 Visits)
- XSS Ownage - hi5 vs. Yahoo! + video in Uncategorized (2 Visits)
- Ce nu se invata la scoala - Tipuri si tehnici spam/Hi5 (4) in Uncategorized (2 Visits)
- Hackersblog.org is now blog.rstcenter.com in (1771 Visits)
- O mica dar importanta precizare in (1371 Visits)
- Twitter in (805 Visits)
- This is the end in (777 Visits)
- Ce servicii de mail folositi? in (774 Visits)
- Un nou membru in (731 Visits)
- La multi ani România, la multi ani românilor in (719 Visits)
- Inca o pierdere de timp in (675 Visits)
- De reţinut in (634 Visits)
- Azi este ziua userilor hackersblog.org in (611 Visits)
- SMS scam (1) in (564 Visits)
- Dezinformare sau proasta informare? in (563 Visits)
- Hi5.com coders read this in (553 Visits)
- Phishing Raiffeisen cu atasament html in (517 Visits)
- Phishing Bancpost in (486 Visits)
- Si tentativele de phishing pot fi amuzante in (422 Visits)
- Ce nu se invata la scoala - Tipuri si tehnici spam/mail (2) in (2707 Visits)
- Ce nu se invata la scoala - Tipuri si tehnici spam/Hi5 (4) in (2602 Visits)
- Despre CSRF, hi5.com, cum sa trisezi la concursuri s.a.m.d. in (1144 Visits)
- [Utilitare] Suna gratis de pe internet sau de pe iPhone in (1107 Visits)
- Ce nu se invata la scoala - (D)DOS (5) in (950 Visits)
- Virusi in clipuri video [how to] in (838 Visits)
- Ce nu se invata la scoala - Tipuri si tehnici spam (1) in (725 Visits)
- Yahoo! redirects - a big issue (with video) in (570 Visits)
- Internet vs. privacy (1) in (469 Visits)
- Ca musca in... in (435 Visits)
- RedTube.com ... The Free Sex Video Community in (12973 Visits)
- usa.kaspersky.com hacked ... full database acces , sql injection in (4921 Visits)
- libertatea.ro vulnerabil la (blind) sql injection in (2950 Visits)
- Pwning cam girls for fun in (2586 Visits)
- Telegraph.co.uk hacked, sql injection in (2547 Visits)
- Facebook hacked - sql injection in (2425 Visits)
- Simpatie.ro, matrimoniale3x.ro, apetisant.ro, deliciu.ro , etc Sql injection in (2407 Visits)
- F-Secure.com - SQL Injection + Cross Site Scripting in (1776 Visits)
- [Hacked]Bitdefender (Portugal) exposes sensitive customer data in (1744 Visits)
- Wtf Avira? in (1723 Visits)
- Christopher "moot" Poole: The case for anonymity online in (1495 Visits)
- Digital Photocopiers Loaded With Secrets in (1458 Visits)
- Wannabe Hackers [2] - cum sa faci un virus by sppy_hacker in (593 Visits)
- Wannabe Hackers [1] - Cum sa hack-uiesti RapidShare-ul in (590 Visits)
- Hope 2603 – Kevin Mitnick - Life a Computer Hacker – Revealed in (463 Visits)
- PRIVACY IS DEAD - GET OVER IT, Pt 01-34 (Recommended by Hackersblog ) in (396 Visits)
- Oldies but goodies - Freedom Downtime - The Story of Kevin Mitnick in (379 Visits)
- [Video] The History Of Hacking in (373 Visits)
- Email Security - Why You Should Encrypt Your Email - Part One in (368 Visits)
- The Story of DEFCON in (343 Visits)
- Deface - tuttoaffari.lastampa.it si citymusiclab.city.corriere.it in (3493 Visits)
- RNS vs. RAI - citizenreport.rai.it hacked. in (3302 Visits)
- Hi5 email finder si sfarsitul a tot ceea ce inseamna privacy in social networking in (2996 Visits)
- Se poate sparge parola de Yahoo? in (2572 Visits)
- Free SMS time, TrimiteSMS.ro in (2492 Visits)
- Planete-plus-intelligente.lemonde.fr defaced by R.N.S. in (2464 Visits)
- Gmail uber hacking in (2257 Visits)
- Camera de supraveghere a universitatii Alexandru Ioan Cuza din Iasi in (2255 Visits)
- Cancan.ro spart pentru a doua oara intr-o zi in (2253 Visits)
- Stiri cu antena3 in (2208 Visits)
Posted on May 19th, 2009
“Unu”, the ex HackersBlog member that stole the spotlight with his findings in internet security has come up with a new, very interesting finding. He gained access to personal data of a very large website.
According to unu, over 8.000.000 (that 8 followed by 6 zeros!! 8 Millions) member accounts of gamespot.com have been at the mercy of anyone who could take advantage of them by means of SQLi. In the mail sent to us, “unu” says that using that SQLi anyone could extract client details such as: home address, DOB, email, and more. He backs up his claims with screenshots on personal deatils of user 2.800.000. Passwords were not in plain sight in this case so gamespot.com users can feel safe (sic).
This Vuln could have been an extremely serious threat for gamespot users but, according to “unu” the problem is now solved and the parameter that allowed data extraction was sanitized and case is closed.
May 19th, 2009 at 7:57 pm
bravo ba
what will be next? 
) hacking wikipedia? :p 
)
May 19th, 2009 at 9:14 pm
Imi pare bine ca ” Unu is back ” . Parca nu e la fel fara el
May 19th, 2009 at 9:32 pm
I’m just wondering if this vulnerability was lost in in some bad hands…
That’s a BIG database
May 20th, 2009 at 6:52 pm
Bine ati revenit dar sincer … tema este asa dezordonata nu stiu unde si ce sa citesc si e foarte obositoare va rog sa puneti tema initiala … este mult mai PROFI ca sa zic asa negra si simplu de navigat .
May 20th, 2009 at 8:49 pm
Oare cati bani o fi facut Unu pana acum din SQLi ?
)
)
Numai din astea 8 mil de date, se pot face cateva sute de mii de $.
Mi se pare foarte interesant cum reuseste el sa gaseasca vulnerabilitati prin site-urile astea mari, ca de exemplu eu pana acuma nu am reusit un SQLi in vreun site cu mai mult de 150k useri. Probabil nu caut eu unde trebuie
Bravo lui, stima din partea mea !
May 20th, 2009 at 8:57 pm
Ce revenire “linistita” ai avut
) Welcome back 
May 20th, 2009 at 9:02 pm
0 Blackie
May 20th, 2009 at 9:21 pm
@Shocker
Mi-e greu sa cred asta. Cel putin nu cred ca daca cineva ar avea ocazia sa faca “ceva” bani din chestia asta, nu ar face-o.
Poate numai daca ar avea deja destul de multi, incat sa nu-si mai faca griji pt ziua, luna, anul urmator.
Dar, cine stie, poate asa e, ca tine.
May 20th, 2009 at 9:38 pm
Nu toti romanii sunt hoti Blackie.
May 20th, 2009 at 10:19 pm
@2fingers
Nu toti. Decat cei nevoiti sa fie – 90%.
Nu sunt hot, nu am facut nici macar $1 prin aceste metode, dar asa cum zisei si mai sus, daca ajungi sa te gandesti la ziua de maine ca nu ai ce cheltui, incep sa-ti vina tot felul de “idei”.
Unii se lasa purtati de idei, unii au foarte mult noroc si reusesc totul in cativa ani, chiar MUNCIND ! (dar astia sunt foarte putini), altii se umilesc muncind cate 30 ani pt familie, o casa si o masina.
May 20th, 2009 at 10:30 pm
Nu a zis nimeni ca esti hot Blackie. Unu face asta pentru ca este pasiunea lui, nu ca sa castige bani.
May 25th, 2009 at 2:41 am
[...] have posted a couple of stories this month, one regarding a SQL injection vulnerability at gamespot.com which exposed the personal details of 8 million subcribers. From previous postings, you can do the [...]