Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- After 13.5M users with unencrypted passwords breach @ 000Webhost, they still don't give a damn about their users.
- Two php files are included when returning response to any request on the site. Apart from inserting stupid tracking code which breaks files such a robots.txt, it also stores every single request into MySQL DB. That MySQL DB can be accessed by anyone.
- While DB doesn't contain users and passwords, it can be used to hack a bunch of websites, since the logs contain uris and some uris contain users and passwords in them.
- Can potentially be used to:
- * bypass server too busy message
- * the CPU limit message http://error404.000webhost.com/cpu-limit-reached.html message
- * the this website was set to be removed for inactivity message
- * the this account reached disk quota limit (350MB) message
- Database donwload
- magnet:?xt=urn:btih:60093e422e30da6aa7ebb36374f8b9566f5947df&dn=000webhost.7z&tr=http%3a%2f%2ftracker.tfile.me%2fannounce&tr=udp%3a%2f%2ftracker.opentrackr.org%3a1337%2fannounce&tr=udp%3a%2f%2ftracker.coppersurfer.tk%3a6969&tr=udp%3a%2f%2ftracker.leechers-paradise.org%3a6969%2fannounce
Add Comment
Please, Sign In to add comment