Joymax Server Files Leak

[pr0xy1337]

Good someone released the joymax.co.kr vulnrb... You dont have to bruteforce anything to get the website.. take the main files they are including everything else.. ( http://prntscr.com/4f9pt6 ) Anyway.. I highly doubt someone will get any further with that. There's an SQLi vulnrb.. in the pmang website as megamax explained somewhere above in the posts. But it is kinda.. character limited if I have to explain it with simple words..

The thing u could do is this...

Everything above 11 characters will be shown as error and till 11th char from the string u entered. If someone needs the info ready I am willing to share it.. you can add me on skype it's the same as my ragezone nick Have fun and good luck with that..

 

[SigYee]

Cmon, first of you RenePunk. You don't have any clue to do even basic injection (as you mentioned, you'd like to hack them with sql). Nvm about it. if this download script went public, let me explain some thing. _Division database in on the server, SQLVersion => 2008 r2. You would jump directiores, but you won't be able download .MDF files, .LDF files with that. (Me & proxy downloaded mstsc.exe from their windows to check which file extensions it do download. If somebody would pass MIME Extensions and 11 chars limit. Soo good luck. (Maybe eggplants from yahoo wouldn't watch this thread xd)

 

[ThuGie]

Re: Joymax Server Files Leak - Kali Linux

haha lobsterman is still alive? dear god i havent seen you in years since runescape days!








MegaMax attracted my attention to this thread... :3

Why would i have died ? :|.

 

[DrugDealers]

• [COLOR=#da00]/community/discussionBoard/discussionBoard_list.asp[/COLOR]
• [COLOR=#da00]/community/discussionboard/discussionboard_view.asp[/COLOR]
• [COLOR=#da00]/community/freeboard/freeboard_list.asp[/COLOR]
• [COLOR=#da00]/community/freeboard/freeboard_view.asp[/COLOR]
• [COLOR=#da00]/community/gmsquare/gm_episode_list.asp[/COLOR]
• [COLOR=#da00]/community/gmsquare/gm_episode_view.asp[/COLOR]
• [COLOR=#da00]/community/ideaboard/ideaboard_list.asp[/COLOR]
• [COLOR=#da00]/community/ideaboard/ideaboard_view.asp[/COLOR]
• [COLOR=#da00]/community/qnaboard/qnaboard_list.asp[/COLOR]
• [COLOR=#da00]/community/screenboard/screenboard_list.asp[/COLOR]
• [COLOR=#da00]/community/screenboard/screenboard_view.asp[/COLOR]
• [COLOR=#da00]/news/event_list.asp[/COLOR]
• [COLOR=#da00]/news/news_list.asp[/COLOR]
• [COLOR=#da00]/support/support_faq_pmang.asp[/COLOR]

 

[pr0xy1337]

• [COLOR=#da00]/community/discussionBoard/discussionBoard_list.asp[/COLOR]
• [COLOR=#da00]/community/discussionboard/discussionboard_view.asp[/COLOR]
• [COLOR=#da00]/community/freeboard/freeboard_list.asp[/COLOR]
• [COLOR=#da00]/community/freeboard/freeboard_view.asp[/COLOR]
• [COLOR=#da00]/community/gmsquare/gm_episode_list.asp[/COLOR]
• [COLOR=#da00]/community/gmsquare/gm_episode_view.asp[/COLOR]
• [COLOR=#da00]/community/ideaboard/ideaboard_list.asp[/COLOR]
• [COLOR=#da00]/community/ideaboard/ideaboard_view.asp[/COLOR]
• [COLOR=#da00]/community/qnaboard/qnaboard_list.asp[/COLOR]
• [COLOR=#da00]/community/screenboard/screenboard_list.asp[/COLOR]
• [COLOR=#da00]/community/screenboard/screenboard_view.asp[/COLOR]
• [COLOR=#da00]/news/event_list.asp[/COLOR]
• [COLOR=#da00]/news/news_list.asp[/COLOR]
• [COLOR=#da00]/support/support_faq_pmang.asp[/COLOR]

All of them are on the ksro (pmang) website, SQLi.. For the ones that are going to ask..

 

[RenePunik]

Closed#

 

[POWEREDSHELL]

I'm trying to access on they root windows. and taking validity of root windows.

yeah they told me that

someone called RenePunik trying to access our Root Windows

....

good luck

 

[cuidaniu]

perhaps need leak full sourcecode,that's perfect!

 

[SigYee]

omg omg fyll source leak oqe? ur made joymax mad omg omg!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

 

[RenePunik]

Closed#

 

[SigYee]

#Request for close

 

[N3vermore]

Meh, this is how far we managed to get last year, and by "we", I mean my team but taking actions on a official live server isn't the brightest idea.

 

[tschulian]

Damn haha!

 

[ZiCO]

Actually it's doable actually to obtain the ksro stuff. they had lfi can be changed into rfi but that wasn't something I could do at that time.
Nice to see some old fellas talking around here [JANGAN & MegaMax]