Hacking Hotline Servers

From Higher Intellect wiki
Jump to: navigation, search
Hacked HL Server FAQ
v1.2
Buddy Ha(c)kit
3-August-1997 

Servers:

Notes:
After downloading the stuffed file, look into the 'Users' folder with StuffIt Expanderª, If you find anything in the 'Users' folder but 'admin' and 'guest', you've been hacked!

__________________________________________________________
Hotline Server 1.1b25.sit

This allows someone to login to your server as:
Name: obj_rsrc.dat
Password: (hold down the option key as you type) spiff

Every priv

How you appear with 'Get Info':
Nickname: (Whatever you entered as 'Your Name' in Options)
Name:       obj_rsrc.dat
Account:    obj_rsrc.dat

How you appear in the 'Online Users' window:
'Your Name' in red
__________________________________________________________
Hotline Server 1.1b23 Ä.sit

This allows someone to login to your server as:
Name: users.data
Password: (hold down the option key as you type) spiff

Every priv

How you appear with 'Get Info':
Nickname: (Whatever you entered as 'Your Name' in Options)
Name:       obj_rsrc.dat
Account:    users.data

How you appear in the 'Online Users' window:
'Your Name' in red
__________________________________________________________
hotlineserv-11b21r3-ppc.sit
('user data' is invisible)

This allows someone to login to your server as:
Name: user data
Password: fuck

Every priv except for 'Can Comment Files', 'Can Disconnect Users' and 'Don't Show Agreement'

How you appear with 'Get Info':
Nickname: (Whatever you entered as 'Your Name' in Options)
Name:       Guest
Account:    user data

How you appear in the 'Online Users' window:
'Your Name' in black
__________________________________________________________
Hotline Server 1.1B23 (68k) Ä
(1. e=mc2 folder is invisible) 
(2. 2nd guest folder is invisible)

1.
This allows someone to login to your server as:
Name: e=mc2
Password: e=mc2

Every priv

How you appear with 'Get Info':
Nickname: (Whatever you entered as 'Your Name' in Options) 
Name:       Hotline Data
Account:    e=mc2

How you appear in the 'Online Users' window:
'Your Name' in red

2.
This allows someone to login to your server as:
Name: guest (and then type a space)
Password: (hold down the option key as you type the space key five times)

Every priv except for 'Can Disconnect Users' 

How you appear with 'Get Info':
Nickname: (Whatever you entered as 'Your Name' in Options) 
 Name:       Guest
Account:    guest 

How you appear in the 'Online Users' window:
'Your Name' in black


Applications:

__________________________________________________________
MultiTracker¨ 1.0.1b (MultiTrackerInstaller.sit)

This looks like a program that lets your server register with three trackers.
What it really does is something else.

The Installer does the following:
1.  Installs into your System Folder, a superuser folder with a UserData file in it.
2.  Installs into your Startup Items folder an untitled AppleScript.
3.  Replaces (or adds) System Software 7.6 versions of the AppleScriptª and AppleScriptLib extensions.
4.  Replaces (or adds) various scripting additions in your System Folder: Extensions: Scripting Additions folder.

The program does the following:
1.  Makes an alias to that superuser folder, in your Users folder.
2.  Asks you to enter the tracker names, to try to make you believe it's going to work!

This allows someone to login to your server as:
Name: superuser
Password: superuser

Every priv except for 'Can Disconnect Users'

How you appear with 'Get Info':
Nickname: (Whatever you entered as 'Your Name' in Options) 
Name:       superuser
Account:    superuser

How you appear in the 'Online Users' window:
'Your Name' in black


Share your opinion