SwatSec has u

gimerstedt · 2013-09-06T12:17:58.000Z

Its says "character is not dead" sometimes because the game is stupid. Its has happened to me a bunch of times. I reload and POOF, my character is gone ad my fame has increased by 10 fold:/

Originally Posted by crewl4e

You're all acting like he is some master god hacker.

He isn't. He breached arbiterz's compromised admin account. That is it. He didn't have to do much to get into a compromised account. He doesnt have access to hundreds of other accounts, all he did is get access to an admin account, and use it to behave like an admin.

Shutting down the forums doesnt make him a MASTER HACKER. Getting into a compromised account also doesnt make him a MASTER HACKER. He is just trying to glorify himself and everyone in here is falling for it.

Again, give someone who knows what they are doing the account credentials, and they can bruteforce a way into the account and gain access. You don't need to be a "hacker" to do that.

If he was a master hacker, he wouldn't need people giving him the monster codes. He wouldn't need people doing anything, all he did was get lucky taking advantage of a compromised admin account. He didn't shut down the game, Kabam shut it down when they realized an account breach was had.

Now, everyone just calm down. Your accounts are safe, unless for some reason he has your email. If you're really THAT worried, change the information. In order for the hacker to have access to your account, he would need your account email. Without it, you'll be fine.

Stoooop iiiiiit how are we supposed to create panic throughout the populous with you calming them down with your somewhat reasonable logic?

Originally Posted by crewl4e

You're all acting like he is some master god hacker.
ectectect

At least you and a few others have common sense. Can't say the same for the rest of the users here who are acting like they're 12. Then again, I think they are 12.

Originally Posted by crewl4e

You're all acting like he is some master god hacker.

He isn't. He breached arbiterz's compromised admin account. That is it. He didn't have to do much to get into a compromised account. He doesnt have access to hundreds of other accounts, all he did is get access to an admin account, and use it to behave like an admin.

Shutting down the forums doesnt make him a MASTER HACKER. Getting into a compromised account also doesnt make him a MASTER HACKER. He is just trying to glorify himself and everyone in here is falling for it.

Again, give someone who knows what they are doing the account credentials, and they can bruteforce a way into the account and gain access. You don't need to be a "hacker" to do that.

If he was a master hacker, he wouldn't need people giving him the monster codes. He wouldn't need people doing anything, all he did was get lucky taking advantage of a compromised admin account. He didn't shut down the game, Kabam shut it down when they realized an account breach was had.

Now, everyone just calm down. Your accounts are safe, unless for some reason he has your email. If you're really THAT worried, change the information. In order for the hacker to have access to your account, he would need your account email. Without it, you'll be fine.

Do you know how difficult it is and how long it take to completely brute force into a server? You need a correct program, the ip and port (this is easy to find), the server remote control panel, and if he is lucky, this only takes about 1 day, if he is unlucky this will take even 1 week to 1 month. I'm sure that the server has protection, and there would even be DDOS protection but never strong enough to ward of a lot of pings.

Have you managed to hack into ROTMG servers?

If you haven't managed to hack into it, then don't say someone else is bad

Kabam shut it down and backed it up and my dead rogue was revived which was pretty good, I was gonna quit after he died because I have so much work. (found in realmeye.com)

Originally Posted by SwedenDaze

At least you and a few others have common sense. Can't say the same for the rest of the users here who are acting like they're 12. Then again, I think they are 12.

Bro, I LOVE YOUR CHILL-NESS XD (Lame -_-) :P

Originally Posted by liaojh1998

Do you know how difficult it is and how long it take to completely brute force into a server?

Excuse me. He never bruteforced a server. He bruteforced an account, which has happened hundreds of times. This time it just so happened to be an admin account. He didnt do anything to the server. All he did was gain access to an admin account. And then the hacked reddit accounts and whatever, once he had the emails, again, it isnt hard to hack an account when you have the information you need. If you post your email address on here to your realm account, I guarantee you someone can and will gain access to it if they were determined enough.

Nothing happened to the Kabam servers as a result of this. He spawned monsters, people spawned into the nexus and died. That is ALL! Don't go spreading shit that isnt correct.

Also, I have had one of my mules email information switched back when Zbornox was still a GM. She didnt need my password to switch it, just the email account. So if he knew someones email, using a GM's credentials, he could change it to what he wanted and then gain access. THE ONLY WAY YOUR ACCOUNT CAN BE COMPROMISED IS IF HE HAS YOUR EMAIL!

Stop creating unnecessary panic. That being said, what he did still takes some effort, not everyone can do it. But he isnt a god, he didnt find some magic hole that let him into the game and blablabla. No. All he did was hack an admin account. The end.

EDIT:

TO put this into perspective, finding the gold exploit requires more "hacking" than what SwatSecOne has done today, as that is an actual exploit due to server issues. Hacking an admin account is not an exploit, the admins log into the game just like we do. Capiche?

Originally Posted by liaojh1998

Do you know how difficult it is and how long it take to completely brute force into a server? You need a correct program, the ip and port (this is easy to find), the server remote control panel, and if he is lucky, this only takes about 1 day, if he is unlucky this will take even 1 week to 1 month. I'm sure that the server has protection, and there would even be DDOS protection but never strong enough to ward of a lot of pings.

Have you managed to hack into ROTMG servers?

If you haven't managed to hack into it, then don't say someone else is bad

Kabam shut it down and backed it up and my dead rogue was revived which was pretty good, I was gonna quit after he died because I have so much work. (found in realmeye.com)

Hmmmm.. It could be a possibility that he did bruteforce the account, not the server, considering the amount of time he's been playing around with realm, opening trenches and tombs, dropping items... maybe he was just f*cking with realm and waiting for his bruteforce to finish.

Originally Posted by crewl4e

Excuse me. He never bruteforced a server. He bruteforced an account, which has happened hundreds of times. This time it just so happened to be an admin account. He didnt do anything to the server. All he did was gain access to an admin account. And then the hacked reddit accounts and whatever, once he had the emails, again, it isnt hard to hack an account when you have the information you need. If you post your email address on here to your realm account, I guarantee you someone can and will gain access to it if they were determined enough.

Nothing happened to the Kabam servers as a result of this. He spawned monsters, people spawned into the nexus and died. That is ALL! Don't go spreading shit that isnt correct.

Also, I have had one of my mules email information switched back when Zbornox was still a GM. She didnt need my password to switch it, just the email account. So if he knew someones email, using a GM's credentials, he could change it to what he wanted and then gain access. THE ONLY WAY YOUR ACCOUNT CAN BE COMPROMISED IS IF HE HAS YOUR EMAIL!

Stop creating unnecessary panic. That being said, what he did still takes some effort, not everyone can do it. But he isnt a god, he didnt find some magic hole that let him into the game and blablabla. No. All he did was hack an admin account. The end.

EDIT:

TO put this into perspective, finding the gold exploit requires more "hacking" than what SwatSecOne has done today, as that is an actual exploit due to server issues. Hacking an admin account is not an exploit, the admins log into the game just like we do. Capiche?

You're probably right XD
I didn't know about the leak of information of kabam's admin account on ROTMG, sry, I thought he hacked into the server first and took the account and used it as his own.

Originally Posted by liaojh1998

You're probably right XD
I didn't know about the leak of information of kabam's admin account on ROTMG, sry, I thought he hacked into the server first and took the account and used it as his own.

If he hacked the kabam servers, he wouldn't have needed to create such a dramatic scene. He could have wiped everything easily. In addition, he wouldn't have had to ask around for the codes for everything he wanted to spawn, because he would have been able to have a full list of it all. He is just a normal hacker who got lucky with the info he did have. Once he had a GM/admin account, he could spawn anything, change fame, gold, change account emails (if he had the email for the account) and change account names, etc etc etc.
I just think it is dumb how everyone is glorifying it and he is basking in this false glory. A real hacker wouldn't do that.

Originally Posted by crewl4e

He never bruteforced a server. He bruteforced an account, which has happened hundreds of times.

there is a rate limit on the login attempts, so it would take years to try all the combinations needed to crack a secure password, unless he has some way to bypass the rate limit

itt swat said a 0day exploit was used to obtain the account credentials, which does not mean it is or is not skillful, only that it is different from a brute force attack

Originally Posted by misterhu

there is a rate limit on the login attempts, so it would take years to try all the combinations needed to crack a secure password, unless he has some way to bypass the rate limit

itt swat said a 0day exploit was used to obtain the account credentials, which does not mean it is or is not skillful, only that it is different from a brute force attack

There are many ways to bruteforce an account.

Similar Threads

Tags for this Thread