Please, hack my account

26 PIN/PIC reset requests

I got an e-mail stating that a support ticket was closed.

rofl the account is going to get banned before anyone gets on

Code:

roots-macbook:~ root$ sudo nexon.net ChicaFlaca giraffe
Password:
nexon.net: BROADCAST AGENT Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10_6_2; en-us) AppleWebKit/531.21.8 (KHTML, like Gecko) Version/4.0.4 Safari/531.21.10, cookies NO, ssl NO
RETURN chicaflaca:giraffe
>BIRTHDAY :: MISSING LAST NAME
>FIRST NAME :: MISSING BIRTHDAY
>LAST NAME :: MISSING BIRTHDAY
>EMAIL :: mechpaul22@gmail.com
>SQ1 :: N/A
>SQ2 :: N/A

as far as the account goes, who knows =P

Haha, i think they are trying to send in support tickets to get a response with the PIC directly, or have it changed through Nexon directly.

Code:

Ticket Description
Game Selection:     MapleStory
Category:     Billing
Sub-Category:     Banned for Billing
Summary:     SUP
Details:     NIGGRS.

Hahaohwow.jpg

Even though it's a dummy, I'm not doing it

Code:

Ticket Description
Game Selection:     MapleStory
Category:     Billing
Sub-Category:     Banned for Billing
Summary:     SUP
Details:     NIGGRS.

Hahaohwow.jpg

I laughed heartily.

well an old exploit still works but i can't access birthday because other people keep signing on and owning my session =(

but here's what i got in >3 minutes

Code:

roots-macbook:~ root$ sudo nexon.net 3 ChicaFlaca giraffe
Password:
nexon.net: BROADCAST AGENT Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10_6_2; en-us) AppleWebKit/531.21.8 (KHTML, like Gecko) Version/4.0.4 Safari/531.21.10, cookies NO, ssl NO
RETURN chicaflaca:giraffe
>BIRTHDAY :: MISSING LAST NAME
>FIRST NAME :: Chica
>LAST NAME :: Flaca
>EMAIL :: mechpaul22@gmail.com
>SQ1 :: N/A
>SQ2 :: N/A

good luck

well an old exploit still works but i can't access birthday because other people keep signing on and owning my session =(

but here's what i got in >3 minutes

Code:

roots-macbook:~ root$ sudo nexon.net 3 ChicaFlaca giraffe
Password:
nexon.net: BROADCAST AGENT Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10_6_2; en-us) AppleWebKit/531.21.8 (KHTML, like Gecko) Version/4.0.4 Safari/531.21.10, cookies NO, ssl NO
RETURN chicaflaca:giraffe
>BIRTHDAY :: MISSING LAST NAME
>FIRST NAME :: Chica
>LAST NAME :: Flaca
>EMAIL :: mechpaul22@gmail.com
>SQ1 :: N/A
>SQ2 :: N/A

good luck

Come on dad! Let's beat those Sleepywood/Basil fools!

It's really fascinating to see how this topic has evolved into three different discussions in each forum community. Shows where each community's focus is.

Has anyone posted this info on an actual hacking forum? It may yield better results.

If only I knew a hacking site.
Then again, why would the hackers want to support awareness?

There are plenty of hackers who do it just for the lulz. They'll prove it's possible, without revealing how they did it.

There is not 50mil on the acc you liar, I just wasted all my time for nothing. I'll prove to you I can login the character if you give me 50mil

Oh guys, he looks like a professional hacker.

I can post it on a site if you want me to..
but it's more of a script-kiddie site.

Well, this doesn't really seem like a very controlled test. Assuming we're doing this to see just how fast an account can get hacked, that is.
If the above is true, we're usually only talking about 1~2 people knowing the account information of a character. If we have hundreds of people trying to get into this account, then it can't exactly "prove" anything, no?

I wonder if 4chan would be interested in this.... xP

GameFAQs.

Well, this doesn't really seem like a very controlled test. Assuming we're doing this to see just how fast an account can get hacked, that is.
If the above is true, we're usually only talking about 1~2 people knowing the account information of a character. If we have hundreds of people trying to get into this account, then it can't exactly "prove" anything, no?

Well, the test can only destroy the creditability of PICs. The E-Mail is completely secure. Aside from that little hiccup with GMail and Google Accounts, there are no other holes. We just want anyone to get in. Then it shows PICs are unsecure, since some kind of bot that inputs every combination it possibly can won't finish in 14 days. They'll need to know the PIC going in to get in. They won't change it through support tickets, they need the E-Mail. They can't change the E-Mail without SQs and Birthday. Support staff would probably be reluctant to serve an account less than a day old anyway.

Well, the test can only destroy the creditability of PICs. The E-Mail is completely secure. Aside from that little hiccup with GMail and Google Accounts, there are no other holes. We just want anyone to get in. Then it shows PICs are unsecure, since some kind of bot that inputs every combination it possibly can won't finish in 14 days. They'll need to know the PIC going in to get in. They won't change it through support tickets, they need the E-Mail. They can't change the E-Mail without SQs and Birthday. Support staff would probably be reluctant to serve an account less than a day old anyway.

once someone cracks birthday they can change password. after changing password you can request a pic reset through support. now assuming the owner of the email doesnt do anything, the account is basically yours

once someone cracks birthday they can change password. after changing password you can request a pic reset through support. now assuming the owner of the email doesnt do anything, the account is basically yours

The old birthday exploit was recently fixed IIRC [~September/October 2009]. Wouldn't support staff be wary of someone asking for a PIC reset via Ticket not long after they have just finished verifying the account? I'm giving the support people too much credit, I'm sure.