privateloader
09-25-2019, 06:30 PM
I was researching online when i found that the FFShrine.org forum database is available for download.
What happen? A recent vuln?
Leon Scott Kennedy
09-25-2019, 06:52 PM
To answer the question in the title: yeah, this place got attacked plenty of times. That database leak isn't too recent, though.
Zeratul13
09-27-2019, 01:38 PM
good for unique email + pass, as formus hacked more than once.
privateloader
09-30-2019, 09:09 PM
To answer the question in the title: yeah, this place got attacked plenty of times. That database leak isn't too recent, though.
The most notorious hack happen in September 2015. Approximately 620k records were released containing email addresses, IP addresses and salted hashes of passwords.
---------- Post added at 02:09 PM ---------- Previous post was at 02:07 PM ----------
good for unique email + pass, as formus hacked more than once.
Are you saying to build a wordlist or email combo with the info available in this database?
Zeratul13
10-05-2019, 06:42 PM
Are you saying to build a wordlist or email combo with the info available in this database?
No, saying use ideal unique email + pass for shrine account, because may leaking again
privateloader
10-05-2019, 09:08 PM
No, saying use ideal unique email + pass for shrine account, because may leaking again
The most common usage of leaked databases is to build credential stuffing combos or one time attack. The most common problem is users registering in the forum using a password that they can remember and this same password is used on other services. Once a attacker obtain the password he/she can try to login on other services using this password combo.
Powered by vBulletin® Version 4.2.4 Copyright © 2019 vBulletin Solutions, Inc. All rights reserved.