divendres, 13 de juliol de 2012

Yahoo piratejat

Un dels serveis d Yahoo ha estat piratejat.


#######################################
#     [ - Owned and Exposed - ]       #
# Brought to you by the D33Ds Company #
#                                     #
# Target: .yahoo.com        #
# Method: Union-based SQL Injection   #
#                                     #
#######################################
-------------
Jump to:

1. MySQL Variables
2. Database/Table/Column Names
3. email:pass dump (450k users)
4. Final Notes
-------------



1. MySQL Variables
------------------

MAX_PREPARED_STMT_COUNT =>> 16382
CHARACTER_SETS_DIR =>> /home/y/share/mysql/charsets/
HAVE_CRYPT =>> YES
CONNECT_TIMEOUT =>> 10
INNODB_VERSION =>> 1.0.9
AUTOMATIC_SP_PRIVILEGES =>> ON
MAX_BINLOG_SIZE =>> 1073741824
BINLOG_CACHE_SIZE =>> 32768
SLOW_QUERY_LOG =>> ON
BACK_LOG =>> 50
FT_MIN_WORD_LEN =>> 3
TABLE_OPEN_CACHE =>> 6144
DELAYED_INSERT_TIMEOUT =>> 300
MAX_HEAP_TABLE_SIZE =>> 67108864
LOG_BIN_TRUST_ROUTINE_CREATORS =>> OFF
CHARACTER_SET_CONNECTION =>> utf8
...

ystraw21@aol.com:lizzybug
19296:k_klemm@yahoo.com:danse
19297:rsmith203@cox.net:surfing
19298:splix1971@msn.com:bonehead
19299:asauer@ucok.edu:050510
19300:karenelarocco@yahoo.com:7669pony
19301:akerzner@sbcglobal.net:twins06
19302:lil_mama_9411@yahoo.com:carmelo15
19303:viater43@msn.com:wheezer1
19304:jose@alvear.com:poopie
...


Dades de : http://d33ds.co.nyud.net/archive/yahoo-disclosure.txt