- Here's the research and the path followed so that everyone else can start digging too:
- Nicknames: Sabu, leon, bottle_of_rum, Xavier
- We have to consider that Sabu may be borrowing any and all names he's using, including Xavier de Leon and Xavier Kaotico.
- - The nickname Sabu
- - The channel #pure-elite on LulzSec's private IRC network.
- A search for sabu and pure-elite yields this:
- with a comment by Sabu's then-girlfriend as follows:
- "t-- email xavier (email@example.com) and tell him whats up, maybe he can figure it out for you. he builds his own computers and such, he's awesome with hardware."
- The comment dates from 2003-02-13 06:06 am UTC, which is well before LulzSec, so the information is probably correct.
- We can again see that Sabu is using the name Xavier with the account firstname.lastname@example.org. He also likes Python.
- Looking for Xavier and Sabu, we now come across the site:
- Which gives the name Xavier Kaotico, the website sabu.net, and the email address email@example.com. Also, looking at the sentinix main page, we see a mention of TigerTeam.se (this comes later).
- Briefly, searching on the email address tells us that the AOL Instant Messenger name "Encryption" is registered to firstname.lastname@example.org.
- Looking at sabu.net, we see that there's confirmation of involvement in Sentinix and something called #pure-elite, which Sabu refers to as "My child; My birth; My manifestation."
- Now we look up Xavier de Leon of TigerTeam security and find all of the following:
- - See Xavier de Leon of TigerTeam security
- - Blogger profile of Xavier de Leon, includes a blog on the now-defunct confinement.org, if anyone wants to purchase a domain whois history report for confinement.org there is no telling what interesting information that may provide. Written with Tia Marie and B.
- - Xavier's security blog
- - A now defunct security team of which Xavier was a part.
- An Introduction to Shellcoding by TigerTeam
- Which includes the text "In mid 2004 tigerteam.se opened up – my own consultancy firm in
- cooperation with Xavier de Leon (a security expert in New York City)." This is dated information, but we can assume from it that at some point, Sabu did indeed live in NYC.
- Looking for social networking profiles reveals only the following, registered to email@example.com:
- Which says that Sabu is 30, in a relationship, and living in New York, NY. Again, with the exception of the age, all of the information is dated. It also lists his occupation and interests:
- Independent Consultant
- What I enjoy doing:
- Python programming, Network and System security, Speed Chess, Intellectual Conversations, and techie geek stuff.
- All of which is consistent with previously gathered information.
- Summary at this point:
- Name(s): Xavier Kaotico, Xavier de Leon
- Email: firstname.lastname@example.org, email@example.com, firstname.lastname@example.org, email@example.com
- Age: 30 as of 2011-06-21
- Location: Possibly New York City, NY (has lived there)
- Websites: sabu.net, pure-elite.org, confinement.org
- Profession: Independent IT consultant
- Interests: Python programming, Linux, network security, exploit development
- Sabu is also purported to be ex-Hackweiser--an old website defacement group. If this is true, the defacement of chickenchoker.com includes a rant about Puerto Rico and describes Sabu as a Puerto Rican. See: http://web.archive.org/web/200102020250/http://chickenchoker.com/
- "Hello, i am "Sabu", no one special for now...lately i've been seeing ALOT of Brazilian and asian defacers just come out a leash their skills, i didn't see any Puerto Rican hacker's, or well: "defacer's", show up, so i guess i'll be your Puerto Rican defacer for now huh? elite... "
- Now for some bonus research, looking at pure-elite.org, we see that there is also a member called "aries". aries is referred to as the leader of pure-elite.
- "Ok, i work at a place called pure-elite..pure-elite.org for the website. I am in their cs clan which consists of artists coders and dj's so you can email me at firstname.lastname@example.org or email@example.com and the boss of pure-elite is firstname.lastname@example.org. Tell aries that i told you to email him an explain that you could use some help our mirc is irc.pure-elite.org and #pure-elite ok peace"
- Additionally, on pure-elite.org, we see that aries is also a Python and PHP programmer, having written a CMS called Lotus. Everything indicates that aries and Sabu are not the same person, HOWEVER... Let's look up aries just to be sure.
- aries has a DeviantArt at http://aries.deviantart.com and his AIM name is "kill aries". The first comment is by mindwerks:
- "~mindwerks Jun 15, 2006
- well i didn't leave the name "aries" my email was out of date and i forgot the password so i have no way to access it ... don't play with the computer much anymore anyways ><"
- Now we visit mindwerks' DeviantArt and discover that he lives in New York. So Sabu and mindwerks/aries both live(d) in New York, were in a Counter-Strike clan together, and coded together in pure-elite.
- BIG REVEAL: I'm betting they knew one another in real life.
Sabu of LulzSec
a guest Jun 21st, 2011 7,070 Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
RAW Paste Data