The Hack o blog

Reinventing the weel

Tag Archives: Email address

​ X Factor & fox.com hacked, contestants database leaked.

The X Factor (Australia)

Image via Wikipedia

A new teem of hackers that go by the name LulzSec has hacked the X Factor contestants database, More information to come so subscribe for updates, i’m assuming there were big  holes left open.

Advertisements

Hotmail exploit that allows changing of a large percentage of peoples passwords.

Windows Live Hotmail logo

Image via Wikipedia

It is now fixed, but here is the Hotmail exploit.

The link: https://maccount.live.com/ac/resetpwdmain.aspx

How it worked:

  1. Type in the Hotmail email you want to change the password for.
  2. Fill out the captcha.
  3. View page source on the next page and see what the users secondary email is (if it exists).
  4. Check to see if the email is registered (alot of people don’t even bother registering them). If it is, do the same thing you just did and keep going back until you have control over the first account you can.
  5. Reset passwords to those emails address in a daisy-chain fashion until you have control.

The old email used to be a hidden input element on the password reset form, but they just fixed it.

(source)