Hack RuneScape

[IceFire908]

He read my response then probably started to type his and somewhere between that and posting it he realized what a waste of time all of this was and logged out.

I doubt he will be back, but if he is I really hope he answers my questions without posting more bullshit while avoiding my questions again.

w/e

[IceFire908]

Doofy is pleading guilty in the SRL-Member's only News Section

http://www.srl-forums.com/forum/poss...rl-t40913.html

[IceFire Fails]

Originally Posted by IceFire908

Hmmm Doofy... what the hell?

Why are you being a total douche?

I still don't understand what your problem is... care explaining why you're pms-ing so much?

What is your point, why are you really here, and what are you trying to accomplish by arguing with us?

You still haven't answered those questions with a reasonable response yet and until you do I don't know what else you want us to do or say to you other than get the fuck out.

About the Scar Scripts Failing, yea no one here really tries but me and death... everyone is really just a leecher... SRL is really my home, not here, just because I'm a moderator and trying to help out here doesn't mean I'm gonna make up some bullshit about how this site is amazing because it isn't...

I am not PMS-ing, I just got mad that US posted that it was a virus, when it is not, and you can check for yourself.

I was only being a total douche because you were, saying how I have no life and such, even though I quit scripting and RS about two years ago. Just got me offended a little bit.

I was here to try and trick noobs, because I thought it would be hilarious and my friend needed shit cuz his account got hacked.

I am not accomplishing anything by arguing, I just enjoy arguing in general and I like to prove myself right and others wrong. Sounds mean, i know, but I'm sure everyone likes to be right.

I just brought you into this because I realized that you were moderator of this site, and I knew you were a yellow-named member or whatever you want to call it on SRL. I honestly would just give up on these forums if I were mod. But if you wanna keep going with em, have fun.

I was never avoiding these questions BTW.

EDIT: About your little post above, I am not pleading at all. There are people on SRL that I used to be good friends with, and I am letting all of them know that I could possibly get banned there, so I was saying goodbye. But I'm not now. I hope you realize though, that I could have just sat here and not said who I am. It's not a plead at all.

[IceFire908]

Originally Posted by IceFire Fails

I am not PMS-ing, I just got mad that US posted that it was a virus, when it is not, and you can check for yourself.

I was only being a total douche because you were, saying how I have no life and such, even though I quit scripting and RS about two years ago. Just got me offended a little bit.

I was here to try and trick noobs, because I thought it would be hilarious and my friend needed shit cuz his account got hacked.

I am not accomplishing anything by arguing, I just enjoy arguing in general and I like to prove myself right and others wrong. Sounds mean, i know, but I'm sure everyone likes to be right.

I just brought you into this because I realized that you were moderator of this site, and I knew you were a yellow-named member or whatever you want to call it on SRL. I honestly would just give up on these forums if I were mod. But if you wanna keep going with em, have fun.

I was never avoiding these questions BTW.

EDIT: About your little post above, I am not pleading at all. There are people on SRL that I used to be good friends with, and I am letting all of them know that I could possibly get banned there, so I was saying goodbye. But I'm not now. I hope you realize though, that I could have just sat here and not said who I am. It's not a plead at all.

Plead can be defined simply as admitting you did something wrong, and even if it wasn't a virus it was malicious and had the attentions of stealing innocent people's accounts which is very low so even though it wasn't a "virus" it was just as bad if not worse.

So I'm going to ban you from this site for good, and I think that you'll find your friends at SRL will no longer trust you

Sorry Doofy, but you made a stupid decision and now you're going to pay for it dearly...

Goodbye.

[IceFire908]

As a side note, Doofy is looking at a possible perm. ban from SRL aswell

It's being discussed at a thread on SRL's member section right now and I've already discussed this with Wizzup?

[Lacky]

Originally Posted by We run U.S.

EDIT: Mods, please LOCK this thread.

Mod permissions are going all weird on us again. I (and I am pretty sure the other Mods) can only delete posts/threads, we can't even edit others posts.

Originally Posted by Freyyr

Hey, it's that time again. That's right, its time for...



WooooooOOOOO!

*bans HackRuneScape using mod interface*

EDIT: BTW, the admin interface shows his IP as 67.159.44.138, which upon a quck NMAP inspection appears to be a LAMP server running some flavour of Linux:

Interesting ports on ****x************a*******************T**********U****ii**************M**K***T***D******** (67.159.44.138):
Not shown: 1700 closed ports
PORT     STATE SERVICE
1/tcp    open  tcpmux
21/tcp   open  ftp
22/tcp   open  ssh
25/tcp   open  smtp
53/tcp   open  domain
80/tcp   open  http
110/tcp  open  pop3
111/tcp  open  rpcbind
143/tcp  open  imap
443/tcp  open  https
465/tcp  open  smtps
993/tcp  open  imaps
995/tcp  open  pop3s
3306/tcp open  mysql
Device type: general purpose|VoIP gateway|media device|storage-misc|WAP|switch|PDA
Running (JUST GUESSING) : Linux 2.6.X|2.4.X (96%), Tandberg Linux 2.6.X (92%), Dream Multimedia Linux 2.6.X (91%), Iomega Linux 2.6.X (91%), Siemens Linux (90%), QLogic embedded (90%), Sharp Linux 2.4.X (90%), FON Linux 2.4.X (90%)
Aggressive OS guesses: Linux 2.6.9 - 2.6.20 (Fedora Core 5 or 6) (96%), Linux 2.6.9 - 2.6.20 (94%), Linux 2.6.9 - 2.6.11 (93%), Linux 2.6.20-1 (Fedora Core 5) (92%), Linux 2.6.5 - 2.6.9 (92%), Tandberg Border Controller VoIP gateway (Linux 2.6.11) (92%), Linux 2.6.17 - 2.6.23 (91%), Linux 2.6.15.4 (91%), Linux 2.6.9 - 2.6.19 (91%), Linux 2.6.17 - 2.6.21 (91%)
No exact OS matches for host (test conditions non-ideal).
Uptime: 4.454 days (since Tue Nov  4 02:21:19 2008)
Network Distance: 10 hops

OS detection performed. Please report any incorrect results at Nmap OS/Service Fingerprint and Correction Submission Page .
Nmap done: 1 IP address (1 host up) scanned in 8.816 seconds

The hostname is also corrupt. Strange things happening. An HTTP proxy, perhaps?

EDIT2: The hostname set on that apache server is pointed at fast.box.net, a file storage service. Entering this domain gives the main box.net page, not that of the apache server. Very peculiar!

And he thought you wouldn't know about obfuscated code.

Originally Posted by IceFire908

Edit:

Oh I think I remember you now,

You used to be registered here as 'The Robin' and you posted that whole big "this site is a joke" where you made up a bunch of crap about how I tried to hack you or something and how everyone here is a criminal.

Hey! I remember that!

Originally Posted by We run U.S.

Go get your self a girl mate.

PotC much?

Originally Posted by Scar Script Forums Fail

~Nice job on downloading the zip though, whoever that was. At least you were smart enough to download it and look at it and find the real code. It really wasn't that hard to find at all.

Well, I knew you couldn't program a virus, so I thought, "Why not?!".



Side Note: Wow...lot's of replies since I was on here yesterday...can't wait to see what his new account will be named for his reply...oh...and to ban hammer him...

EDIT: ROFL Peter, I love you Ban Comments/Reasons. XD

[Freyyr]

Ding ding ding! We have a winner!

I thought it was a little odd that he'd be posting from a linux server with so many services running, so I figured he was using a proxy. Taking a look back at that nmap log, this time with versioning detection:

Host 67.159.44.138 appears to be up ... good.
Interesting ports on 67.159.44.138:
Not shown: 1700 closed ports
PORT     STATE SERVICE    VERSION
1/tcp    open  tcpwrapped
21/tcp   open  ftp        PureFTPd
22/tcp   open  ssh        OpenSSH 4.3 (protocol 2.0)
25/tcp   open  smtp       Exim smtpd 4.69
53/tcp   open  domain
80/tcp   open  http       Apache httpd 1.3.37
110/tcp  open  pop3       Courier pop3d
111/tcp  open  tcpwrapped
143/tcp  open  imap       Courier Imapd (released 2005)
443/tcp  open  ssl/http   Apache httpd 1.3.37
465/tcp  open  ssl/smtp   Exim smtpd 4.69
993/tcp  open  ssl/imap   Courier Imapd (released 2005)
995/tcp  open  ssl/pop3   Courier pop3d
3306/tcp open  mysql      MySQL (unauthorized)
Aggressive OS guesses: Linux 2.6.9 - 2.6.20 (Fedora Core 5 or 6) (96%), Linux 2.6.9 - 2.6.20 (94%), Linux 2.6.5 - 2.6.9 (93%), Linux 2.6.9 - 2.6.11 (93%), Tandberg Border Controller VoIP gateway (Linux 2.6.11) (93%), Linux 2.6.20-1 (Fedora Core 5) (92%), Linux 2.6.17 - 2.6.23 (91%), Linux 2.6.15.4 (91%), Linux 2.6.9 - 2.6.19 (91%), Linux 2.6.17 - 2.6.21 (91%)
No exact OS matches for host (test conditions non-ideal).
Uptime: 7.417 days (since Tue Nov  4 02:21:10 2008)
Network Distance: 11 hops
TCP Sequence Prediction: Difficulty=205 (Good luck!)
IP ID Sequence Generation: All zeros
Service Info: Host: serv2.hidemyass.com

The last line's the kicker. He's using a web based PHP proxy belonging to serv2.hidemyass.com. Connecting to that secure Apache service running on the server confirms that the server is using a security certificate for that company. Checkmate.