Learn More
Resend Email
16
SteffTek
7y

Today my fellow @EaZyCode found out a local Hosting Provider has a massive security breach.

He wrote an Plugin for Minecraft with an own file explorer and the ability to execute runtime commands over it.

We discovered that this specific hosting provider stores the ftp passwords one level above the FTP-Root. In FUCKING PLAIN TEXT! AND THE MYSQL PASSWORD TOO! And even more shit is stored there ready to be viewed by intelligent people...

It's one of the fucking biggest Hosting provider Germanys!

But, because EaZyCode has such a great mind and always find such bugs, I give him the title "Providers Endboss" today, he has earned it.

Loving you ❤️

Edit: we used SendMail with runtime commands and sended too many empty Spammails (regret noting)

rant

breach

security

sucks

provider

hosting
Favorite
Ranter
Comments
  • 2
    7y
    @EaZyCode
  • 4
    7y
    That was actually cool!
  • 1
    7y
    And I created him this DevBanner just for lolz! Check out devBanner!

    (Endboss = Endgegner)
  • 2
    7y
    Yo thx! :)
    Btw, you can use sendmail command!
  • 0
    7y
    Das lustige ist ich habe das als erster herausgefunden ^^ und schon mehrere plugins damit verknüpft habe xD
  • 2
    7y
    Des is schon traurig.
    This is so fucking sad.
  • 3
    7y
    Nitrado, seriously? My friends use it, I thought it was reliable.

    Oh, I regret nothing on using my own VPS with my own management system and plugins 😂
  • 4
    7y
    HOLD UP
    NITRADO?!

    DAMN
  • 3
    7y
    Nitrado, really? They are around for so long.. also they seemed reliable..
  • 1
    7y
    @LastDigitOfPi yup
  • 3
    7y
    I read security branch and was very confused...
  • 2
    7y
    @Alice the next step is to create NiPinkTrado, your own hosting
  • 0
    7y
    @amahlaka jep they do
  • 0
    7y
    @amahlaka nope we didn't reported it, but we deleted most files of our own server and couldn't boot it then.... Also we didn't had permission to other accounts servers.
  • 0
    7y
    @amahlaka should work, we even can create screens within the Minecraft chat!

    (And because every server has 1gbit and you can buy 10 servers for 3 days for 10 bucks, you could easily create a DoS BotNet (Jes we tried it))
  • 0
    7y
    @amahlaka NOPE not really xD
  • 1
    7y
    @amahlaka they allow you to go up to / folder! You can also read grub bootloader configs and so on...
  • 0
    7y
    @EaZyCode @amahlaka and you could attack each system in the entire network by DoS attacks, because there were multiple network interfaces interconnected
  • 1
    7y
    @SteffTek there were 64 each 1GBit (using ifconfig)
  • 0
    7y
    @EaZyCode it looks like the Java process is started by an administrator account or that every account has a bad permissions setup.
  • 2
    7y
    This is legitimately making me sad.
    They are the biggest hoster in Germany.

    Off to get some passwords :)
  • 1
    7y
    @Kreischo It's more now ;)
    The were the cheapest I could find for my payment methods
  • 3
    7y
    @PrivateGER
    Kek
  • 1
    7y
    @LastDigitOfPi yup it still gets updates
Related Rants
devRant © 2021 Hexical Labs LLC
Privacy Policy  |  Terms of Service
Add Comment