What happened?
A couple days ago, we found out about a website that likes to go by Neopets Cheats Database or NCD which was stealing a lot of tutorials from us, 3vo and neofreaks. They also planned to take down codex by having one of their members send me a keylogger which would give them my password. After that, they would login to my account, screenshot everything, make sql backups, give hidden administrator priveledges to some accounts, demote I'mportant members and delete forums.
We have been tracking their activity through a couple of accounts on their forum and screenshotted everything:
- http://www.neocodex.us/ncd/I'mg/snapshot4.png
- http://www.neocodex.us/ncd/I'mg/snapshot5.png
- http://www.neocodex.us/ncd/I'mg/snapshot6.png
- http://www.neocodex.us/ncd/I'mg/snapshot7.png
- http://www.neocodex.us/ncd/I'mg/snapshot8.png
- http://www.neocodex.us/ncd/I'mg/snapshot9.png
- http://www.neocodex.us/ncd/I'mg/snapshot10.png
- http://www.neocodex.us/ncd/I'mg/snapshot11.png
- http://www.neocodex.us/ncd/I'mg/neofreaks_progs_1.png
- http://www.neocodex.us/ncd/I'mg/neofreaks_tuts_1.png
- http://www.neocodex.us/ncd/I'mg/neofreaks_tuts_2.png
- http://www.neocodex.us/ncd/I'mg/neofreaks_tuts_3.png
- http://www.neocodex.us/ncd/I'mg/war3z.png
- http://www.neocodex.us/ncd/I'mg/war3z-2.png
- http://I'mg130.exs.cx/I'mg130/7568/capture282103049vd.jpg
- http://I'mg130.exs.cx/I'mg130/5110/capture282103058fh.jpg
- http://I'mg130.exs.cx/I'mg130/8857/capture282103079sv.jpg
- http://I'mg130.exs.cx/I'mg130/1448/capture282103091bo.jpg
- http://I'mg130.exs.cx/I'mg130/688/capture282103101mz.jpg
- http://I'mg130.exs.cx/I'mg130/1755/capture282103209tz.jpg
- http://I'mg86.exs.cx/I'mg86/6397/capture282103211eo.jpg
- http://I'mg86.exs.cx/I'mg86/4964/capture282103247uf.jpg
- http://I'mg86.exs.cx/I'mg86/6520/capture282103311ts.jpg
- http://I'mg86.exs.cx/I'mg86/6571/capture282103385ki.jpg
- http://I'mg86.exs.cx/I'mg86/1701/capture282103408xf.jpg
- http://I'mg54.exs.cx/I'mg54/4263/capture282103418ci.jpg
- http://I'mg54.exs.cx/I'mg54/703/capture282103460wt.jpg
- http://I'mg54.exs.cx/I'mg54/1705/capture282103475dg.jpg
- http://I'mg54.exs.cx/I'mg54/638/capture282103556cn.jpg
- http://I'mg54.exs.cx/I'mg54/4381/capture282103568pm.jpg
What we didHow it will happen
BAS1X, and Danneh, and most probrably other people are going to be kylogging the NeoCodex root administrator, "HydroGen". We have some people that are elligable for the job.
When it will happen
Most probrably, within the next two weeks, at the latest.
What we will do, having access to an administrator's account
Once we have infiltrated HydroGen's account, we will begin to make backups of the SQL, so that if we wanted to, we could copy the board and every member, topic, and post currently on there. We will then start to demote all members of staff with any powers at all (mods, smods, admins). That will be BAS1X's job. While he is busy, I will be catching every artmoney hack/program/source code/any peice of useful information. After finally rendering any staff useless, we will delete all boards.
God hope they have a backup.
After realizing their plan, we I'mmediately set out to stop them. We knew they were going after my account (hydrogen) so the account was totally rigged. It was given a fake administrator user group which allowed it to see completely fake admin and staff areas. Fake source code was inserted into those areas. Scripts in admin.php were modified to trigger off an alarm on every staff members computer when the trap was set off. A fake password was sent to the NCD crew who then tried to login to my account, went for acp first and tripped off an alarm. They were redirected to this page: http://www.neocodex.us/ncd. What they saw to their horror was that the information contained in NCD had been recorded, screenshoted, and emailed to NeoFreaks and 3volutions, so they can do what they deem appropriate to each of you. every neopets community will know about their failed attempt to close the biggest neopets forum on the internet. A special news bulletin was made on NeoCodex, explaining your plan to the members, and how we handled it.
The users: Hydrogen, dominate, favredriver, and kyo were automatically banned with execution of this script. All of their IPs have been logged, along with proof that they have made many illegal steps towards internet constituents. Their host will be notified soon as well as their ISPs. Neopets INC will also been notified of their activities and will decide what to do in regards to intellectual property they have taken by posting other neopets players' accounts and a passwords.
The users involved
- favredriver
- Dan
- Kyo
- Dominate
- Bas1x
To protect Neocodex from disaster. Later we found out that these bunch of fools were not good conspirators at all. They were in fact afraid to login to my account once they had the password.
Another reason we did this was to end shit like this once and for all. Countless people on the internet think they are hackers when they are really script kiddies. Those same script kiddies think they can boss people around who are minding their own business. Let this be a warning to everyone else who even thinks about trying this on us - You mess with the best, you die like the rest.
---
For identity purposes, stryyp and netbususer were on our side undercover in NCD. They had nothing to do with their plans. They were actually very beneficial to us. Thank you stryyp and netbususer!