The Hack o blog
Reinventing the weel
Tag Archives: Email address
X Factor & fox.com hacked, contestants database leaked.
Posted by on May 7, 2011
Image via Wikipedia
A new teem of hackers that go by the name LulzSec has hacked the X Factor contestants database, More information to come so subscribe for updates, i’m assuming there were big holes left open.
Hotmail exploit that allows changing of a large percentage of peoples passwords.
Posted by on February 5, 2011
Image via Wikipedia
It is now fixed, but here is the Hotmail exploit.
The link: https://maccount.live.com/ac/resetpwdmain.aspx
How it worked:
- Type in the Hotmail email you want to change the password for.
- Fill out the captcha.
- View page source on the next page and see what the users secondary email is (if it exists).
- Check to see if the email is registered (alot of people don’t even bother registering them). If it is, do the same thing you just did and keep going back until you have control over the first account you can.
- Reset passwords to those emails address in a daisy-chain fashion until you have control.
The old email used to be a hidden input element on the password reset form, but they just fixed it.
(source)
The Hack o blog 