Monster-WoW Hacked

[clawlancer]

Hi!
The new password system gave me a chance to steal some admin account. This is what happened:


Stay tuned for Videos!
http://www.youtube.com/watch?v=HmhKp...ature=youtu.be

[clawlancer]

Soo much boss!

[Disphotic]

I like how they removed all forum threads without a note :P

[clawlancer]

need to change my IP address i think O.O

[clawlancer]

Monster WoW Hacked | 4.0.6 Private Server Hack - YouTube

[Muhammad.R1]

Btw you forgot to block your IP address in that picture ... Right at the bottom of it.

Otherwise pretty neat :P

[clawlancer]

Used VPN, so nothing to care about

[wowsc4p3]

You can't delete the server with an ingame sql query. If you know the path, you can overwrite the contents of files, but that's about it.
EDIT: Found the exploit used to do this. Admin of monster-wow please contact me & I'll fix it for you. Or you can fix it, whatever.
Proof so you know I'm not trolling, some of the latest GM tickets:

633 2125398 Aronel
632 204931 Mephus
631 1836228 Anukaa
630 289722 Administrato
629 2173700 Xoqt
628 2042400 Prysm
627 2174259 Cyx
626 2149672 Darkaoer
625 2127962 Crogar
624 1792281 Ahion
623 2173939 Campeonxx
622 2111387 Bomagyi
621 2107487 Nighttcra
620 2145721 Lukkaz
619 1840879 Bloodarroww
618 2162607 Narck
617 2168696 Cyrobin
616 2115958 Allmightyone
615 1178512 Vandermoody
614 1865073 Efevos
613 2162870 Eddieboy
612 2052710 Waarwiik
611 1464430 Vvar
610 2140610 Namahas
609 545089 Schneizel
608 2079410 Irya

[clawlancer]

With the proper usage of Game Client, and the Remote access what can you acquire , you can DELETE sql-s.

[wowsc4p3]

No, You can't.

[DuperPooper]

I must be missing something. But I think that though this shows you're good as far as I am concerned at what you're doing. I don't see the benefits of doing this. Were you paid by another server / are you the owner of another server? I fail to see the profit is all.

Though as I said kudos on being able to do it.

Sent from my Triumph using Tapatalk 2

[Aurina]

I must be missing something. But I think that though this shows you're good as far as I am concerned at what you're doing. I don't see the benefits of doing this. Were you paid by another server / are you the owner of another server? I fail to see the profit is all.

Though as I said kudos on being able to do it.

Sent from my Triumph using Tapatalk 2

I agree. Nice work on his half, exploiting the system.

He appears to be known on the server as people call him by name when they blame him. He might have a personal vendetta on some people and decided to have fun when the possibility showed up.

Drama is the typical reason to this or the like - when it comes to private servers.

[clawlancer]

I Don't have any payment, i never used to be GM / Admin on Monster WoW. I'm just Hungarian like the Owner, and he' was my old friend. It's kinda like a revenge.

[clawlancer]

Releasing their Char DB soon^^

[Vragoth]

What was your point of entry and exploit?
I only found a simple XSS a while back.