Read-only archive

A preserved archive of the Logical Gamers community forums, 2009-2025. The original threads and posts, served read-only. Registration, posting and private messages are gone for good.

Mod Account Got Banned -

4.3k views · started by Jester · · closed · page 1 of 2
#1
Mod Account Got Banned -
hmm it took about 20 hours but they finally got me lol things you may need to know about mods




----------------------------------------
Gaia Online
----------------------------------------



Hello _________!



This email is being sent to you because an attempt was made to sign in to your Gaia account from an unfamiliar location (IP address). Using different IP addresses is common for many members, but it can sometimes indicate malicious activity is occurring on an account.



If you are trying to access Gaia from a new location, or from a computer you haven’t used for awhile, please click on the link below to verify that you are the true owner of the account. As always, if you weren’t expecting this email – because you’re not trying to access the account – you don’t need to click the link. As a general internet rule, never click on links in emails unless you’re expecting the email. We do recommend though that you change your password just to be safe the next time you access your account. The link below will expire upon use or 30-minutes after it’s sent, whichever occurs first.



To confirm that you are the owner of this account and that you wish to be able to login to Gaia , please click the following validation link:



Information | Gaia Online


Have a safe and fun time on Gaia!

The Gaia Online Administrative Team

----------------------------------------
Privacy Policy:
Privacy Notice | Gaia Online

Terms of Service:
Terms of Service | Gaia Online
----------------------------------------
Gaia Online and all images associated with GAIA Online are (C) Copyright 2003 - 2010 Gaia Interactive, Inc. All Rights Reserved
Gaia Online P.O. Box 612680 San Jose, CA 95161-2680





Heya guys,

There is currently a thread going in the main SD of a hacker that is trying to steal moderators their E-mail addresses to gain access to Moddog, SD, ect, ect, ect.
This E-mailaddress I'm currently sending from was compromised and the alternative E-mail was changed to "Tyler777@Bungie.net" which is the same E-mail as the hacker who tried to compromise us this weekend.
To be on the safe side I asked the moderators in IRC to ban me.

Would you mind looking into the issue and mind unbanning me, since this hotmailaddress is fully back under control now.
I'll be changing the hotmail to be on the safe side this doesn't happen again.

Respectfully,
SoundBlast


she thinks its in her controll HAHA


#2
nice dude
you're so pro lol
xD
#3
lol did u read that part about her securing her email? im still in it HAHAHA when her accounts unbanned im gona have it again LMFAO
#4
LOL SOUNDBLAST.
lmfao.
#5
I'd be careful saying you still have email access of that account :x specially here
#6
Kint wrote:
I'd be careful saying you still have email access of that account :x specially here


even if she gets full controll again i got her kookies LOL my hands in her JAR
#7
Old School shit.
#8
Chad wrote:
Old School shit.


Well it works Wich Is Good
#9
Well that was fun reading, nice job : )
Did they really ban you?
#10
wooow, ur so pro.
like for real.
He's gonna get it back again xD
#11
awesome but yeah they got you

in the UG or UG silver you shoudl post how to do this!
#12
Download the staff discussion and upload on a free host.
#13
epic hax!

how did you get the account anyways?
#14
Soundblast is a guy.
He lives in... Sweden?
His name is lesley.
Pretty cool guy actually.
#15
so everyone knows the identity
#16
How did you guys hack a mod, its Crazy
props for that. :D
#17
Wow epic. If I was an admin I would keep him banned. Just because he might be hacked again. Which you are going to do anyway lol.
#18
Torian wrote:
Download the staff discussion and upload on a free host.


I like that idea.
#19
Jester wrote:
even if she gets full controll again i got her kookies LOL my hands in her JAR


How did you get her session cookie? :)
#20
HIS session cookie xDD
You used some injected script right jester?
I want ;P
#21
Artificial wrote:
How did you get her session cookie? :)

I am most likely guessing a XSS script saved as an image.
#22
Torian wrote:
Download the staff discussion and upload on a free host.

lol its to late for that if u got to me before it got banned i woulda donwloaded i just screen shotted posts that interested me
#23
Still haven't said how you got their cookie. How did you get around HTTPOnly? :)
#24
Artificial wrote:
How did you get her session cookie? :)


i never logged out XD just kept my computer on all night XD she is using a new email the account just went inactiv gona keep her paypal and moneybookers tho XD she changed the emails password but i didnt log out so i still have acsess


I got a simple way to inject a script to get Firefox/IE Passwords via a php script injected into the page it also grabs the cookies.txt file from there CPU and copies it to the server

all you do is report a post with the injected script (only one way to do it and i am sure u can figure it out your smart after all) but it has to be a PHP IMAGE! it logs all there stuff of anyone who goes to that page in the thread also u could probable get a color coded system to only get mods/admins/devs or get one to check the persons equipped items and steal if its a value of whatever you want or higher. but "IM LAZY XD"
gona try to get a dev or mod tonight i posted the script in the mods forum just before i was banned on that account so i gotta check my logs on my server and u know test out the cookie.txt files
#25
Jester wrote:
I got a simple way to inject a script to get Firefox/IE Passwords via a php script injected into the page it also grabs the cookies.txt file from there CPU and copies it to the server


Ridiculous post makes no sense. PHP is a server-side programming language, you have no control over the client.

I call bullshit.
#26
Artificial wrote:
Ridiculous post makes no sense. PHP is a server-side programming language, you have no control over the client.

I call bullshit.


You miss-understand, I use it to get stuff from the browser its on my server i just "copy" the info in the txt file that is it. Believe what u want. It is working for me.
#27
It's not what I believe, it's fact. What you're describing with PHP is not possible, and I should know, seeing as how I develop in it 4-8 hours on a daily basis. To say otherwise is like saying the moon is made of cheese.

Before you go posting an elaborate lie to boost your ego, at least have the decency to do some research so you don't look like a complete ass.
#28
Arti, I am not sure how exactly jester would do it via PHP, but he showed it to riddle, and riddle verified.
#29
Artificial wrote:
It's not what I believe, it's fact. What you're describing with PHP is not possible, and I should know, seeing as how I develop in it 4-8 hours on a daily basis. To say otherwise is like saying the moon is made of cheese.

Before you go posting an elaborate lie to boost your ego, at least have the decency to do some research so you don't look like a complete ass.
Whatever just leave it at that and leave me be.
#30
didnt he also get google to verify?
#31
I dont believe google ever saw the account, I asked him about it myself.
#32
iamwilliam wrote:
didnt he also get google to verify?


i showed google the account.....not anything more
#33
by "showed" do you mean
screen shots
or
giving him account info?
#34
iamwilliam wrote:
by "showed" do you mean
screen shots
or
giving him account info?

heard of Team Viewer?
#35
oh ok then
that makes sense
#36
wht those this for?
#37
i'm surprised she wasn't banned due to ip being different thats one of the main things gaia suspects for mods and admins is the ip
#38
RobbyTheReaper wrote:
i'm surprised she wasn't banned due to ip being different thats one of the main things gaia suspects for mods and admins is the ip


if u get there email u can bypass this......
#39
Jester wrote:
if u get there email u can bypass this......


true

but then all it takes is then a single email to the company

if we wanted we could somewhat use this to are advantage
#40
RobbyTheReaper wrote:
true

but then all it takes is then a single email to the company

if we wanted we could somewhat use this to are advantage


Lol didnt u read my post i didnt change any account info and she found out i was in her accounts so she sent an email read the email she sent