MySQL exploit (Top 100 Arena bonus)

Rasp

Member
1032

Nov 4th 2016, 19:22:51

I wonder if these guys got hacked:

http://mmorpg.top100arena.com/...d=51155&incentive=135

Warning: mysql_connect(): Too many connections in /home/top100ar/public_html/includes/db.php on line 7

Warning: mysql_select_db(): Access denied for user 'root'@'localhost' (using password: NO) in /home/top100ar/public_html/includes/db.php on line 8

Warning: mysql_select_db(): A link to the server could not be established in /home/top100ar/public_html/includes/db.php on line 8
Our host is having major database issues. The site will be back soon.

[16:18:00] znc-rasp: We can kill bushido, but not bushifo, zack, moriarty, ghost rider, or darkling
[16:18:07] Req: Is that all the same person?
[16:18:12] symba: yea
[16:18:25] mob: my kids are like dad why are you laughing so much

Rasp

Member
1032

Nov 4th 2016, 19:23:54

This made news this week:

https://threatpost.com/...server-compromise/121738/

Rasp

Member
1032

Nov 4th 2016, 20:14:41

weird, looks like they updated the captcha and it's back up again.

Marshal

Member
32,589

Nov 4th 2016, 20:34:26

nothing uncommon from top100.

Patience: Yep, I'm with ELK and Marshal.

ELKronos: Patty is more hairy.

Gallery: K at least I am to my expectations now.

LadyGrizz boobies is fine

NOW3P: Morwen is a much harsher mistress than boredom....

Akula

Member

EE Patron
4123

Nov 4th 2016, 20:44:57

quite normal Rasp

=============================
"Astra inclinant, sed non obligant"

SOL http://sol.ghqnet.com/
=============================

smikke

Member

EE Patron
243

Nov 5th 2016, 12:20:26

bonus

Celphi

Member

EE Patron
6501

Nov 5th 2016, 23:20:43

This isn't a hack. It's the back end attempting to connect with MYSQL and it's denying access.

They made the mistake of having their errors displayed to screen. That's a big no no. Now everyone knows the path to the db.php file.

The part that says "(using password: NO)" means no password was even entered in.

ini_set(display_errors, 0);

Resistance is futile. You will be assimilated.