Graal Forums  

Go Back   Graal Forums > PlayerWorlds > PlayerWorlds Main Forum
FAQ Members List Calendar Search Today's Posts Mark Forums Read

Reply
 
Thread Tools Search this Thread Display Modes
  #1  
Old 12-05-2008, 12:45 AM
WaDaFack WaDaFack is offline
*
WaDaFack's Avatar
Join Date: May 2007
Posts: 419
WaDaFack is an unknown quantity at this point
Post Add this to your wordfilter.txt

Add this to your word filter, it prevents body onload scripts, which can steal your IP when you PM the script and much more..

Just download the file, copy the text than add it to your wordfilter.txt
Attached Files
File Type: txt antibodyonload.txt (826 Bytes, 224 views)
__________________
WaDaFack

Reply With Quote
  #2  
Old 12-05-2008, 12:57 AM
maximus_asinus maximus_asinus is offline
RIP DarkCloud_PK
Join Date: Oct 2001
Location: Canada
Posts: 3,749
maximus_asinus has a reputation beyond reputemaximus_asinus has a reputation beyond reputemaximus_asinus has a reputation beyond reputemaximus_asinus has a reputation beyond reputemaximus_asinus has a reputation beyond reputemaximus_asinus has a reputation beyond reputemaximus_asinus has a reputation beyond reputemaximus_asinus has a reputation beyond reputemaximus_asinus has a reputation beyond reputemaximus_asinus has a reputation beyond reputemaximus_asinus has a reputation beyond repute
A robber stole my IP.
__________________
Save Classic!
Reply With Quote
  #3  
Old 12-05-2008, 01:06 AM
CharlieM CharlieM is offline
Hired/Fired
Join Date: Sep 2007
Location: Places you dont want to go babe.
Posts: 1,834
CharlieM will become famous soon enough
Send a message via AIM to CharlieM Send a message via MSN to CharlieM
Am I stupid or do I just not see how it can steal your ip..
__________________


"You can discover what your enemy fears most by observing the means he uses to frighten you."

Eric Hoffer

turned that one on you didn't I.
Reply With Quote
  #4  
Old 12-05-2008, 01:09 AM
WaDaFack WaDaFack is offline
*
WaDaFack's Avatar
Join Date: May 2007
Posts: 419
WaDaFack is an unknown quantity at this point
The text I sent you isn't the script that captures your IP. It's the text that you need to add to your wordfilter.txt, so it can prevent "body onload" scripts. Maybe they don't steal your IP but they do something, that allows that person to get into your computer.
__________________
WaDaFack

Reply With Quote
  #5  
Old 12-05-2008, 01:32 AM
DrakilorP2P DrakilorP2P is offline
Registered User
DrakilorP2P's Avatar
Join Date: Apr 2006
Posts: 755
DrakilorP2P is just really niceDrakilorP2P is just really nice
They can do something and get into my computer? Now I'm scared.

Edit:

I went to a site and it said to install some drivers or something and I clicked 'Accept'. Did I do wrong?
__________________
Testbed user: I figured since I can never find any scripters it was time to take desperate measures...and...TEACH MYSELF 0.0
Reply With Quote
  #6  
Old 12-05-2008, 01:37 AM
WaDaFack WaDaFack is offline
*
WaDaFack's Avatar
Join Date: May 2007
Posts: 419
WaDaFack is an unknown quantity at this point
If you don't really believe me than don't.
All I can say is that I was already a victim, Saeros, PrayDoh, Extravagante, Roman5 (Ruxxter) and Victor were sending me non-sence PMs. Later after, I did netstat -n and I noticed 50other IPs (Proxies) which were not recognized by me.
I did some research, and I found what script it was.
__________________
WaDaFack

Reply With Quote
  #7  
Old 12-05-2008, 01:53 AM
Tigairius Tigairius is offline
The Cat
Tigairius's Avatar
Join Date: Jan 2007
Location: Missouri, USA
Posts: 4,240
Tigairius has a brilliant futureTigairius has a brilliant futureTigairius has a brilliant futureTigairius has a brilliant futureTigairius has a brilliant futureTigairius has a brilliant futureTigairius has a brilliant futureTigairius has a brilliant future
Quote:
Originally Posted by WaDaFack View Post
If you don't really believe me than don't.
All I can say is that I was already a victim, Saeros, PrayDoh, Extravagante, Roman5 (Ruxxter) and Victor were sending me non-sence PMs. Later after, I did netstat -n and I noticed 50other IPs (Proxies) which were not recognized by me.
I did some research, and I found what script it was.
It sounds like you could be injected with a trojan based on some of the symptoms you described. I would recommend running some scans and downloading TDS-3 to kill the arbitrary connections. You can also do this in a less user friendly setting with the Sysinternal Suite, or even with default system software.

Thanks for the heads up about the html, but I don't know if it will be contributing to a computer attack. It's possible that you are infected with a well-known trojan that you downloaded from any torrenting, etc. They could have simply abused that already injected trojan to enter your computer.

It's not uncommon to have several IPs connected to your computer at once depending on which programs you're using, but if you're able to trace the IPs and find out they have some sort of relation with these people you listed it may be in your best benefit to change your passwords & change your internet security settings.
__________________


“Shoot for the moon. Even if you miss, you'll land among the stars.”
Reply With Quote
  #8  
Old 12-05-2008, 01:56 AM
WaDaFack WaDaFack is offline
*
WaDaFack's Avatar
Join Date: May 2007
Posts: 419
WaDaFack is an unknown quantity at this point
I NEVER torrent any files, and I run
Disk Clean Up
Defragment
Nortan Anti Virus
Webwroot Spysweaper

twice a week.

When I did get the Proxies, I got the adress and the ACTUALL IP.
I know it was the people I listed , I am 100% sure.
__________________
WaDaFack

Reply With Quote
  #9  
Old 12-05-2008, 01:59 AM
WaDaFack WaDaFack is offline
*
WaDaFack's Avatar
Join Date: May 2007
Posts: 419
WaDaFack is an unknown quantity at this point
Sorry for double post but..
The people who I listed earlier, connected 50 IPs to my internet, but I had to boot them by doing
ping <ipgoeshere> -t -l 15000
on CMD
__________________
WaDaFack

Reply With Quote
  #10  
Old 12-05-2008, 02:42 AM
Googi Googi is offline
A Serious Epidemic
Googi's Avatar
Join Date: Oct 2001
Location: Canada
Posts: 18,866
Googi has much to be proud ofGoogi has much to be proud ofGoogi has much to be proud ofGoogi has much to be proud ofGoogi has much to be proud ofGoogi has much to be proud of
Send a message via AIM to Googi
Quote:
Originally Posted by WaDaFack;
All I can say is that I was already a victim, Saeros, PrayDoh, Extravagante, Roman5 (Ruxxter) and Victor were sending me non-sence PMs.
Maybe you should use the script on them to steal your IP back.
__________________
Reply With Quote
  #11  
Old 12-05-2008, 02:57 AM
Victor Victor is offline
Registered User
Join Date: Aug 2007
Posts: 15
Victor is on a distinguished road
Wow LOL!
Reply With Quote
  #12  
Old 12-05-2008, 03:24 PM
Twinny Twinny is offline
My empire of dirt
Twinny's Avatar
Join Date: Mar 2006
Location: Australia
Posts: 2,422
Twinny is just really niceTwinny is just really nice
Send a message via AIM to Twinny
Quote:
Originally Posted by WaDaFack View Post
Sorry for double post but..
The people who I listed earlier, connected 50 IPs to my internet, but I had to boot them by doing
ping <ipgoeshere> -t -l 15000
on CMD
Your grasp of networking is pissing me off. Your use of "to my internet" is by far the worst.

Even if they did get your ip (who gives a crap?), you need to have a backdoor in your computer before anything can happen. Best way for this to happen is by downloading dodgy files which contains a trojan. Most trojans can easily be defeated simply by running NAT on your gateway device as this will screw over hackers trying to connect.

I really REALLY doubt pinging 15k at ips will kill them. Ever.

Also, doesn't v5 completely remove HTML (and by extension, javascript) for it's inbuilt methods? I bring this up cause i originally got all html blocked (including "<3" hehehe) for abuse.

Last edited by Twinny; 12-05-2008 at 03:35 PM..
Reply With Quote
  #13  
Old 12-05-2008, 04:41 PM
Inverness Inverness is offline
Incubator
Inverness's Avatar
Join Date: Aug 2004
Location: Houston, Texas
Posts: 3,613
Inverness is a jewel in the roughInverness is a jewel in the rough
I think some part of this is a load of bull. Someone want to better explain how opening a PM will do this stuff?
__________________
Reply With Quote
  #14  
Old 12-05-2008, 05:30 PM
Soala Soala is offline
Ideas on Fire
Soala's Avatar
Join Date: Jun 2007
Location: In my head
Posts: 3,208
Soala is a jewel in the roughSoala is a jewel in the rough
I already got pms and even masses on some server where the guy was talking about something then POOF in the middle of what he was saying, I could see my body filename and my head filename, I even received my attributes, is that normal ?

Should I care ? Or is that just a glitch?
Reply With Quote
  #15  
Old 12-05-2008, 06:08 PM
cyan3 cyan3 is offline
Registered User
cyan3's Avatar
Join Date: Nov 2005
Location: England
Posts: 2,919
cyan3 has a brilliant futurecyan3 has a brilliant futurecyan3 has a brilliant futurecyan3 has a brilliant futurecyan3 has a brilliant futurecyan3 has a brilliant futurecyan3 has a brilliant future
Quote:
Originally Posted by alexandralove View Post
I already got pms and even masses on some server where the guy was talking about something then POOF in the middle of what he was saying, I could see my body filename and my head filename, I even received my attributes, is that normal ?

Should I care ? Or is that just a glitch?
Doesn't GScript have commands to show player attributes in pm's?

NPC Code:
#3 //Shows your head file name in pm's
#8 //Shows your body file name in pm's

Reply With Quote
  #16  
Old 12-05-2008, 11:50 PM
cbk1994 cbk1994 is offline
the fake one
cbk1994's Avatar
Join Date: Mar 2003
Location: San Francisco
Posts: 10,718
cbk1994 has a reputation beyond reputecbk1994 has a reputation beyond reputecbk1994 has a reputation beyond reputecbk1994 has a reputation beyond reputecbk1994 has a reputation beyond reputecbk1994 has a reputation beyond reputecbk1994 has a reputation beyond reputecbk1994 has a reputation beyond reputecbk1994 has a reputation beyond reputecbk1994 has a reputation beyond repute
Send a message via AIM to cbk1994
Quote:
Originally Posted by alexandralove View Post
I already got pms and even masses on some server where the guy was talking about something then POOF in the middle of what he was saying, I could see my body filename and my head filename, I even received my attributes, is that normal ?

Should I care ? Or is that just a glitch?
No, there is an easy, annoying way to do that.
__________________
Reply With Quote
Reply

Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump


All times are GMT +2. The time now is 10:44 PM.


Powered by vBulletin® Version 3.8.11
Copyright ©2000 - 2026, vBulletin Solutions Inc.
Copyright (C) 1998-2019 Toonslab All Rights Reserved.