GoFuckYourself.com - Adult Webmaster Forum

GoFuckYourself.com - Adult Webmaster Forum (https://gfy.com/index.php)
-   Fucking Around & Business Discussion (https://gfy.com/forumdisplay.php?f=26)
-   -   0wned: global DNS hacked -> google, aol, msn out of service (https://gfy.com/showthread.php?t=542791)

gooddomains 11-21-2005 12:09 PM

0wned: global DNS hacked -> google, aol, msn out of service
 
Not a fake, you can do the whois search yourself on your servers. Seems as if DNS root name system was hacked this morning:

whois -h whois.internic.net aol.com

Whois Server Version 1.3

Domain names in the .com and .net domains can now be registered
with many different competing registrars. Go to http://www.internic.net
for detailed information.

AOL.COM.ZZZZ.DNSW.COM
AOL.COM.IS.N0T.AS.1337.AS.GULLI.COM
AOL.COM.IS.0WNED.BY.SUB7.NET
AOL.COM.AINT.GOT.AS.MUCH.FREE.PORN.AS.SECZ.COM
AOL.COM

To single out one record, look it up with "xxx", where xxx is one of the
of the records displayed above. If the records are the same, look them up
with "=xxx" to receive a full display for each record.

>>> Last update of whois database: Mon, 21 Nov 2005 02:25:34 EST <<<


whois -h whois.internic.net yahoo.com

Whois Server Version 1.3

Domain names in the .com and .net domains can now be registered
with many different competing registrars. Go to http://www.internic.net
for detailed information.

YAHOO.COM.ZZZZ.DNSW.COM
YAHOO.COM.VIRGINCHASSIS.COM
YAHOO.COM.UNIQUELYUJEWELS.COM
YAHOO.COM.TWIXTEARS.COM
YAHOO.COM.TW
YAHOO.COM.TACTICALBATON.COM
YAHOO.COM.SG
YAHOO.COM.PURRFURRED.COM
YAHOO.COM.OPTIONSCORNER.COM
YAHOO.COM.MX
YAHOO.COM.IS.N0T.AS.1337.AS.SEARCH.GULLI.COM
YAHOO.COM.ELPOV.COM
YAHOO.COM.DALLARIVA.COM
YAHOO.COM.BR
YAHOO.COM.BGPETERSON.COM
YAHOO.COM.AU
YAHOO.COM

To single out one record, look it up with "xxx", where xxx is one of the
of the records displayed above. If the records are the same, look them up
with "=xxx" to receive a full display for each record.

>>> Last update of whois database: Mon, 21 Nov 2005 02:25:34 EST <<<

whois -h whois.internic.net google.com

Whois Server Version 1.3

Domain names in the .com and .net domains can now be registered
with many different competing registrars. Go to http://www.internic.net
for detailed information.

GOOGLE.COM.ZZZZ.DNSW.COM
GOOGLE.COM.VN
GOOGLE.COM.SUCKS.FIND.CRACKZ.WITH.SEARCH.GULLI.COM
GOOGLE.COM.MX
GOOGLE.COM.IS.NOT.HOSTED.BY.ACTIVEDOMAINDNS.NET
GOOGLE.COM.IS.APPROVED.BY.NUMEA.COM
GOOGLE.COM.HAS.LESS.FREE.PORN.IN.ITS.SEARCH.ENGINE .THAN.SECZY.COM
GOOGLE.COM.BR
GOOGLE.COM.AU
GOOGLE.COM

To single out one record, look it up with "xxx", where xxx is one of the
of the records displayed above. If the records are the same, look them up
with "=xxx" to receive a full display for each record.

>>> Last update of whois database: Mon, 21 Nov 2005 02:25:34 EST <<<

Harmon 11-21-2005 12:09 PM

see da sig

Tom_PM 11-21-2005 12:10 PM

Yikes, now thats a hack job. :helpme

websiex 11-21-2005 12:12 PM

I wonder if they hacked the gibson?

split_joel 11-21-2005 12:15 PM

lol wouldnt be a hard thing to do its just a stupid thing to do

Screaming 11-21-2005 12:16 PM

Aol is all ready fixed.

Domain servers:
dns-01.ns.aol.com
152.163.159.232
dns-02.ns.aol.com
205.188.157.232
dns-06.ns.aol.com
149.174.211.8
dns-07.ns.aol.com
64.236.1.107

poisson 11-21-2005 12:17 PM

wtf, wow

loverboy 11-21-2005 12:19 PM

mad views, no sig spot for me

:smokin

sacX 11-21-2005 12:23 PM

that doesn't mean it's hacked. It's always been like that. People have just included these popular urls in their domains.

Phil21 11-21-2005 12:24 PM

....

You are kidding right?

I guess "the root nameservers" have been "hacked" for many years.

Anyone can make a host record show up when you do a text search. For example I could register gfy.com.haha.0wned.whatever-domain-i-own.com as a nameserver, and it would show up in your above whois queries for gfy.com

pawsregd 11-21-2005 12:25 PM

Whoa fuck

Greg MissionD 11-21-2005 12:27 PM

I think i will go with sacX on this.

pr0 11-21-2005 12:28 PM

mad skillz

u-Bob 11-21-2005 12:30 PM

get a clue :)

gfx3 11-21-2005 12:34 PM

Google was down for several hours today but it's back up now, don't know if that crap had anything to do with it. Go hack some gov site but not google :mad:

PenisFace 11-21-2005 12:39 PM

Quote:

Originally Posted by websiex
I wonder if they hacked the gibson?

Hahaha!!! Hackers was the best movie ever made. Nothing has even come close to it in terms of kick-ass-ness :pimp

RonUSMC 11-21-2005 12:58 PM

Actually, of the hundred or so root servers they filled one of them with false information. Its getting harder and harder to do. So the example up top, what he is saying is that if you try to get a domain name from a certain root DNS server, it will come up wrong. It happens. Here is a readout from AOL.com as of now:


Advanced Systems #1 TIMEOUT
Advanced Systems #2 TIMEOUT
AT&T Worldnet #2 [No cached answer: it does have the NS records for aol.com., with a TTL of 5h 19m 21s]
AT&T Worldnet #1 [No cached answer: it does have the NS records for aol.com., with a TTL of 1d 1h 6m 32s]
Compuserve #1 [No cached answer: Would go to NS of (root)]
Compuserve #2 [No cached answer: Would go to NS of (root)]
Drizzle #1 A=205.188.142.182 [TTL=14s] A=64.12.50.151 [TTL=14s]
Drizzle #2 [No cached answer: Would go to NS of ]
Earthlink #1 A=205.188.142.182 [TTL=58s] A=64.12.50.151 [TTL=58s]
Earthlink #2 A=205.188.142.182 [TTL=39s] A=64.12.50.151 [TTL=39s]
Earthlink NetAxs #1 A=205.188.142.182 [TTL=38s] A=64.12.50.151 [TTL=38s]
Earthlink NetAxs #2 A=205.188.142.182 [TTL=9s] A=64.12.50.151 [TTL=9s]
GTE #1 [No cached answer: it does have the NS records for aol.com., with a TTL of 8m 7s]
GTE #2 [No cached answer: it does have the NS records for aol.com., with a TTL of 46m 12s]
IBMnet #1 TIMEOUT
IBMnet #2 A=205.188.142.182 [TTL=21s] A=64.12.50.151 [TTL=21s]
Internet America #1 [No cached answer: it does have the NS records for aol.com., with a TTL of 45m 55s]
Internet America #2 [No cached answer: it does have the NS records for aol.com., with a TTL of 45m 55s]
Internet MCI #1 [No cached answer: Would go to NS of (root)]
MCI Internet #2 [No cached answer: it does have the NS records for aol.com., with a TTL of 1d 15h 6m 6s]
MCI Internet #2 [No cached answer: it does have the NS records for aol.com., with a TTL of 18m 57s]
MCI Worldcom #1 A=205.188.142.182 [TTL=36s] A=64.12.50.151 [TTL=36s]
MCI Worldcom #2 [No cached answer: it does have the NS records for aol.com., with a TTL of 1d 10h 58m 29s]
Mindspring #1 A=205.188.142.182 [TTL=27s] A=64.12.50.151 [TTL=27s]
Mindspring #2 [No cached answer: it does have the NS records for aol.com., with a TTL of 25m 46s]
OneWest Idaho #1 [No cached answer: it does have the NS records for aol.com., with a TTL of 51m 21s]
OneWest Idaho #2 [No cached answer: it does have the NS records for aol.com., with a TTL of 32m 11s]
OneWest Montana #1 [No cached answer: it does have the NS records for aol.com., with a TTL of 41m 51s]
OneWest Montana #2 [No cached answer: it does have the NS records for aol.com., with a TTL of 59m 47s]
OneWest Wyoming #1 [No cached answer: Would go to NS of ]
OneWest Wyoming #2 [No cached answer: it does have the NS records for aol.com., with a TTL of 51m 26s]
Prodigy Internet #1 [No cached answer: it does have the NS records for aol.com., with a TTL of 44s]
Prodigy Internet #2 [No cached answer: it does have the NS records for aol.com., with a TTL of 57m 40s]
Qwest #1 [No cached answer: it does have the NS records for aol.com., with a TTL of 1d 16h 37m 14s]
Qwest #2 [No cached answer: it does have the NS records for aol.com., with a TTL of 1d 12h 52m 4s]
Roadrunner #1 [No cached answer: it does have the NS records for aol.com., with a TTL of 50m 42s]
Roadrunner #2 [No cached answer: it does have the NS records for aol.com., with a TTL of 10m 12s]
Southwestern Bell #1 A=205.188.142.182 [TTL=59s] A=64.12.50.151 [TTL=59s]
Southwestern Bell #2 [No cached answer: Would go to NS of ]
SprintNet #1 [No cached answer: it does have the NS records for aol.com., with a TTL of 1d 12h 57m 2s]
Sprynet #1 [No cached answer: Would go to NS of (root)]
Sprynet #2 [No cached answer: Would go to NS of (root)]
Sprynet #1 A=205.188.142.182 [TTL=49s] A=64.12.50.151 [TTL=49s]
Sprynet #2 A=205.188.142.182 [TTL=27s] A=64.12.50.151 [TTL=27s]
Sympatico #1 [No cached answer: it does have the NS records for aol.com., with a TTL of 54m 50s]
Touch America #1 [No cached answer: it does have the NS records for aol.com., with a TTL of 1h 17m 20s]
Touch America #2 [No cached answer: it does have the NS records for aol.com., with a TTL of 57m 45s]
UUNet #1 A=205.188.142.182 [TTL=18s] A=64.12.50.151 [TTL=18s]
UUNet #2 A=205.188.142.182 [TTL=33s] A=64.12.50.151 [TTL=33s]

TheSenator 11-21-2005 01:03 PM

hacking 101

ilbb 11-21-2005 01:25 PM

ha ha ha, that's why google was down today

mn 11-21-2005 01:33 PM

If you guys spent less time getting a high post count on a board you could spend a few minutes learning the basics of how internet works.

If I found this thread on a surferfer board I wouldn't be surprised.

BTW, Im not surprised.

toddler 11-21-2005 01:39 PM

someone post the timeline. this is oooooolllllddddd nnnnneeeeewwwwssss.....been around for years, go look at microsoft.com.

pornguy 11-21-2005 01:41 PM

Someone is trying to prove to the US that the DNS servers are no safer in the US than anywhere else in the world.

GweedZilla 11-21-2005 02:17 PM

Quote:

Originally Posted by PenisFace
Hahaha!!! Hackers was the best movie ever made. Nothing has even come close to it in terms of kick-ass-ness :pimp

"What should I do?"

"Type Cookie you idiot!" chomp chomp chomp

Luc 11-21-2005 02:42 PM

lol. if that's hacked i don't know what h4x0red is.

that shit is old news homie.

teksonline 11-21-2005 03:10 PM

ugh goofballs,

"To single out one record, look it up with "xxx", where xxx is one of the
of the records displayed above. If the records are the same, look them up
with "=xxx" to receive a full display for each record."


you do whois -h whois.internic.net "=aol.com"

full reports on all of those entries, thye are not hacks, i can go
register nameserver aol.com.mydomain.com and it will appear
although i see now alot of registrars now have it so you can only
register nsx or dnsx where x = number such as ns1.

3M TA3 11-21-2005 03:57 PM

http://i-cant-believe-this-is-real.wildwestbabes.com/


All times are GMT -7. The time now is 10:53 AM.

Powered by vBulletin® Version 3.8.8
Copyright ©2000 - 2025, vBulletin Solutions, Inc.
©2000-, AI Media Network Inc123