Epoch add_passwd.cgi list
 

Is this a problem? Not trying to shit on Epoch, they are top notch, but I found this referrer in a logfile. I don't think that list would have been posted if it couldn't be used for something.
http://www.ccpowerforums.com/cgi-bin...;f=18;t=000089

The site isn't loading over here, what was it? An exploit to Epoch?

jDoG

Here is a snip of the post. That forum is just loaded with exploits and hacks for ccbill, epoch, paypal etc. Interesting read.

http://www.pantyandpanties.com/cgi-bin/add-passwd.cgi
http://www.legshowgirls.com/cgi-bin/add-passwd.cgi
http://www.tokyosex.com/cgi-bin/add-passwd.cgi
http://alexuswinston.com/cgi-bin/add-passwd.cgi
http://altasex.com/cgi-bin/add-passwd.cgi
http://amateur-beaver.com/cgi-bin/add-passwd.cgi
http://amateurcouples.net/cgi-bin/add-passwd.cgi
http://amateursection.com/cgi-bin/add-passwd.cgi
http://amateurtramps.com/cgi-bin/add-passwd.cgi
http://amazingindians.com/cgi-bin/add-passwd.cgi
http://americanwives.com/cgi-bin/add-passwd.cgi

Hundreds of them....

Fucking bastards, I guess it is good to be one up on them. haha

jDoG

that site is scary they even got a forum just about hacking xxx sites
http://www.CCpowerForums.com/cgi-bin...ubb=forum;f=19

This is nothing new, Epoch and some of the other billing scripts have been wide open for a loong time.. It's fairly easy for these people to just add logins for themselves.

I can't believe they haven't done anything about that. It was a problem back in 2000.

Registrant:
C and C Power Electronics ltd.
.
., . 00000
US

Domain name: CCPOWERFORUMS.COM

Administrative Contact:
Tim, David [email protected]
.
., . 00000
US
+1.0000000000
Technical Contact:
Tim, David [email protected]
.
., . 00000
US
+1.0000000000


Registration Service Provider:
SoftCom Technology Consulting Inc., [email protected]
416-9577400
http://myhosting.com
This company may be contacted for domain login/passwords,
DNS/Nameserver changes, and general domain support questions.


Registrar of Record: TUCOWS, INC.
Record last updated on 29-May-2003.
Record expires on 15-May-2008.
Record Created on 15-May-2003.

Domain servers in listed order:
NS1.MADUNIX.NET 209.126.191.242
NS2.MADUNIX.NET 209.126.191.243

p00p,

What else is on those forums? Anything illegal - like say something APIC or ASACP might be interested in? :Graucho

You can get domains shut down for having fake whois info, contact the registrar.

All of these attempts to thwart these "hackers" is the wrong idea. Instead you should read what they post, and break their toys.

b.

wow. Lots of credit card numbers with full info on there too. My signups are gonna skyrocket tonight! :Graucho

Looks like they know how to scam affiliate programs too.....

!!!!!

http://www.ccpowerforums.com/cgi-bin...c;f=7;t=000165