Hacked HL Server FAQ v1.2 Buddy Ha©kit 3-August-1997 Servers: Notes: After downloading the stuffed file, look into the 'Users' folder with StuffIt Expanderª, If you find anything in the 'Users' folder but 'admin' and 'guest', you've been hacked! __________________________________________________________ Hotline Server 1.1b25.sit This allows someone to login to your server as: Name: obj_rsrc.dat Password: (hold down the option key as you type) spiff Every priv How you appear with 'Get Info': Nickname: (Whatever you entered as 'Your Name' in Options) Name: obj_rsrc.dat Account: obj_rsrc.dat How you appear in the 'Online Users' window: 'Your Name' in red __________________________________________________________ Hotline Server 1.1b23 Ä.sit This allows someone to login to your server as: Name: users.data Password: (hold down the option key as you type) spiff Every priv How you appear with 'Get Info': Nickname: (Whatever you entered as 'Your Name' in Options) Name: obj_rsrc.dat Account: users.data How you appear in the 'Online Users' window: 'Your Name' in red __________________________________________________________ hotlineserv-11b21r3-ppc.sit ('user data' is invisible) This allows someone to login to your server as: Name: user data Password: fuck Every priv except for 'Can Comment Files', 'Can Disconnect Users' and 'Don't Show Agreement' How you appear with 'Get Info': Nickname: (Whatever you entered as 'Your Name' in Options) Name: Guest Account: user data How you appear in the 'Online Users' window: 'Your Name' in black __________________________________________________________ Hotline Server 1.1B23 (68k) Ä (1. e=mc2 folder is invisible) (2. 2nd guest folder is invisible) 1. This allows someone to login to your server as: Name: e=mc2 Password: e=mc2 Every priv How you appear with 'Get Info': Nickname: (Whatever you entered as 'Your Name' in Options) Name: Hotline Data Account: e=mc2 How you appear in the 'Online Users' window: 'Your Name' in red 2. This allows someone to login to your server as: Name: guest (and then type a space) Password: (hold down the option key as you type the space key five times) Every priv except for 'Can Disconnect Users' How you appear with 'Get Info': Nickname: (Whatever you entered as 'Your Name' in Options) Name: Guest Account: guest How you appear in the 'Online Users' window: 'Your Name' in black Applications: __________________________________________________________ MultiTracker¨ 1.0.1b (MultiTrackerInstaller.sit) This looks like a program that lets your server register with three trackers. What it really does is something else. The Installer does the following: 1. Installs into your System Folder, a superuser folder with a UserData file in it. 2. Installs into your Startup Items folder an untitled AppleScript. 3. Replaces (or adds) System Software 7.6 versions of the AppleScriptª and AppleScriptLib extensions. 4. Replaces (or adds) various scripting additions in your System Folder: Extensions: Scripting Additions folder. The program does the following: 1. Makes an alias to that superuser folder, in your Users folder. 2. Asks you to enter the tracker names, to try to make you believe it's going to work! This allows someone to login to your server as: Name: superuser Password: superuser Every priv except for 'Can Disconnect Users' How you appear with 'Get Info': Nickname: (Whatever you entered as 'Your Name' in Options) Name: superuser Account: superuser How you appear in the 'Online Users' window: 'Your Name' in black