Hi all.
We (me and my friends) start play here 3 days ago. On second day me and my friend have been jailed "for nothing", because we cast energy fields in Trammell. We try to contact gm ant talk about it, but they simply smile.
We don't know what to do and try login by another players for fun.
We go next, take 1\4 of all accounts and start brutforce for lol passwords.
Many accounts have been bruted, but only 3 of them was very rich =)
Login>take items>going Luna or MG>drop items on the ground, also some items go to our friends =)
Bored of this we have found some vulnerability on main page and login by Admin Drake.
We stop do screenshots and go to admin\gm panel in down left corner fo site. We can do many things =) Shutdown server, edit any many on site, upload\download anything, make sql injection, give GM access to any player, view logs and so on. It was interesting to see this =)
But we are good guys and stop on this. Please do some better security.
We (me and my friends) start play here 3 days ago. On second day me and my friend have been jailed "for nothing", because we cast energy fields in Trammell. We try to contact gm ant talk about it, but they simply smile.
We don't know what to do and try login by another players for fun.
We go next, take 1\4 of all accounts and start brutforce for lol passwords.
Many accounts have been bruted, but only 3 of them was very rich =)
Login>take items>going Luna or MG>drop items on the ground, also some items go to our friends =)
Bored of this we have found some vulnerability on main page and login by Admin Drake.
We stop do screenshots and go to admin\gm panel in down left corner fo site. We can do many things =) Shutdown server, edit any many on site, upload\download anything, make sql injection, give GM access to any player, view logs and so on. It was interesting to see this =)
But we are good guys and stop on this. Please do some better security.
Commenta