Post: This is how PSN got hacked!
Options
04-26-2011, 10:26 PM
#1
ciunas
Insert User Title Here
Above is a screenshot of their PSN servers access logs. This log is created on the main server of the PlayStation Network. Likely many of you have no idea what exactly a log would be. Sony itself has this log file are also publicly retrievable through the URL. Mistake number two, perhaps? Here also some interesting logs:
Originally posted by another user
214.1.211.251 - - [15/Apr/2011: 9:40:11 -0700] "GET / OfficeScan / cgi / cgiChkMasterPwd.exe HTTP/1.1" 404 336 "-" "-"
178.202.110.92 - - [22/Apr/2011: 7:05:00 p.m. -0700] "GET / admin / cdr / counter.txt HTTP/1.1" 404 343 "-" "Mozilla/5.0 (compatible; Windows NT 6.1, de; rv: 1.9.2.16) Gecko/20110319 Firefox/3.6.16 "
214.1.211.251 - - [15/Apr/2011: 9:40:09 -0700] "GET / _vti_bin / fpcount.exe? Page = default.htm | Image = 3 | Digits = 15 HTTP/1.0" 404 325 "- "" - "
214.1.211.251 - - [15/Apr/2011: 9:39:51 -0700] "GET / scripts / foxweb.exe / HTTP/1.0" 404 324 "-" "-"
214.1.211.251 - - [15/Apr/2011: 9:39:48 -0700] "GET / phpwebfilemgr / index.php? F =../../../ etc / services HTTP/1.0" 404 328 " - "" - "
178.202.110.92 - - [22/Apr/2011: 7:05:00 p.m. -0700] "GET / admin / cdr / counter.txt HTTP/1.1" 404 343 "-" "Mozilla/5.0 (compatible; Windows NT 6.1, de; rv: 1.9.2.16) Gecko/20110319 Firefox/3.6.16 "
214.1.211.251 - - [15/Apr/2011: 9:40:09 -0700] "GET / _vti_bin / fpcount.exe? Page = default.htm | Image = 3 | Digits = 15 HTTP/1.0" 404 325 "- "" - "
214.1.211.251 - - [15/Apr/2011: 9:39:51 -0700] "GET / scripts / foxweb.exe / HTTP/1.0" 404 324 "-" "-"
214.1.211.251 - - [15/Apr/2011: 9:39:48 -0700] "GET / phpwebfilemgr / index.php? F =../../../ etc / services HTTP/1.0" 404 328 " - "" - "
What we see here again include the use of an FVC, local file inclusion, in the last row. With this is that the ip 214.1.211.251, this is possibly the IP of the attacker. Nor has a number of Javascript injections occurred:
Originally posted by another user
214.1.211.251 - - [15/Apr/2011: 9:39:49 -0700] "GET / board.php? <script> FID = alert (document.cookie) </ script> HTTP/1.0" 404 314 "- "" - "
214.1.211.251 - - [15/Apr/2011: 9:39:38 -0700] "GET / servlet / webacc? User.id ="> <script> alert ('eeye2004'
</ script> HTTP/1.0 " 404 319 "-" "-"
214.1.211.251 - - [15/Apr/2011: 9:39:30 -0700] "GET / modules.php? Name = Reviews & rop = post & title =% 253cscript comment> alert 2528document.cookie%)% 253c/script> HTTP / 1.0 "404 316" - "" - "
214.1.211.251 - - [15/Apr/2011: 9:39:38 -0700] "GET / servlet / webacc? User.id ="> <script> alert ('eeye2004'
</ script> HTTP/1.0 " 404 319 "-" "-"214.1.211.251 - - [15/Apr/2011: 9:39:30 -0700] "GET / modules.php? Name = Reviews & rop = post & title =% 253cscript comment> alert 2528document.cookie%)% 253c/script> HTTP / 1.0 "404 316" - "" - "
It is frightening to know that Sony is so easy to hack, because come on Sony, FVC and Javascript injections? Really? This looks like the work of a 14 year old boy. Thanks to SKFU Blog for the announcement of the log.
You must login or register to view this content.
The following 7 users say thank you to ciunas for this useful post:
04-27-2011, 04:12 AM
#38
x-GuNPLaY---o
Do a barrel roll!
Speechless about how a big empire is so easy to infiltrate. So damn pathetic
04-27-2011, 04:51 AM
#39
getxscared
Space Ninja
Originally posted by xXRyanXx
it wasnt a 14 year old boy it was batman
<3 Batman so I <3 hackerz
The following user thanked getxscared for this useful post:
04-27-2011, 05:35 AM
#41
ANTI-ONYX
Can’t trickshot me!
who the hell really cares HOW it got hacked..... i love my ps3....but sony got totally owned and got their assses handed to them on a silver platter.....
whoever hacked PSN should be hired by sony to fix their own SECURITY problems.....
OBviously the hackers know way more about sony's security than sony does themselves.... its COMICAL.......
AT THE END of the day, I really dont feel bad for sony at all, they deserved the breach...... eventhough it really sux for all of us.......:n00b:
whoever hacked PSN should be hired by sony to fix their own SECURITY problems.....
OBviously the hackers know way more about sony's security than sony does themselves.... its COMICAL.......
AT THE END of the day, I really dont feel bad for sony at all, they deserved the breach...... eventhough it really sux for all of us.......:n00b:
04-27-2011, 06:20 AM
#42
ARVINLOCOx
Who’s Jim Erased?
04-27-2011, 06:47 AM
#43
Slashey
Come at me brahh
Originally posted by sh
You must login or register to view this content.
Above is a screenshot of their PSN servers access logs. This log is created on the main server of the PlayStation Network. Likely many of you have no idea what exactly a log would be. Sony itself has this log file are also publicly retrievable through the URL. Mistake number two, perhaps? Here also some interesting logs:
What we see here again include the use of an FVC, local file inclusion, in the last row. With this is that the ip 214.1.211.251, this is possibly the IP of the attacker. Nor has a number of Javascript injections occurred:
It is frightening to know that Sony is so easy to hack, because come on Sony, FVC and Javascript injections? Really? This looks like the work of a 14 year old boy. Thanks to SKFU Blog for the announcement of the log.
You must login or register to view this content.
Above is a screenshot of their PSN servers access logs. This log is created on the main server of the PlayStation Network. Likely many of you have no idea what exactly a log would be. Sony itself has this log file are also publicly retrievable through the URL. Mistake number two, perhaps? Here also some interesting logs:
What we see here again include the use of an FVC, local file inclusion, in the last row. With this is that the ip 214.1.211.251, this is possibly the IP of the attacker. Nor has a number of Javascript injections occurred:
It is frightening to know that Sony is so easy to hack, because come on Sony, FVC and Javascript injections? Really? This looks like the work of a 14 year old boy. Thanks to SKFU Blog for the announcement of the log.
You must login or register to view this content.
Must be GeoHot's prodigy :carling:
The following user thanked Slashey for this useful post:
05-04-2011, 01:06 AM
#46
jo2305
▲ ▲ №Өβ ▲ ▲
Originally posted by Tuhoaja
So, who was it'?
I still dont understand lol
I still dont understand lol
The IP address of the hacker seems to be from Columbus, Ohio, or from some military base, according to the server logs. But any nerd would know that this dude used a proxy, or some program to hide his IP. Nobody would hack into Sony's servers and make it as easy as looking into server logs to find out who did it. It might be some guy in Europe, who knows.
Copyright © 2026, NextGenUpdate.
All Rights Reserved.
