Forums

Begin the heisting!!

"You are missing a vital hacking framework" Blast!

Anyone have a clue how to find out what port kerberos runs on?

I like to pull heists.

I think the 'official' ports are usually 88 or 750, check those first

got the same message.. Hmm maybe that is what the application does

Download the NetConnect.framework from Austin Sarner's website.  There is a link on the page that says "Files."

Fiji

A member of the MacUpdate team has learned that an app they've been pursuing for some time for their MacUpdate Promo service has been sniped by macZOT!. They have requested assistance in convincing the app's developer to switch services.

To do this, MacUpdate has provided our members with its application designed to exploit a security flaw in the macZOT! backend. Contact the developer through macZOT! communications and send a nasty message to terminate their relationship. You will receive a combo code as a reward.

Download brute force cracker application provided by MacUpdate and Austin Sarner
The vulnerable username is "apps"
You will need to attack the port that kerberos is running on.
Use it to enter the macZOT! mailbox
Through there, email developer Nick Ledoux and convince him effectively to drop involvement with macZOT!
On completion, we will contact you with a combo code as a reward

### [Still a] Proud Member of the BLUE Team™ ####

Thanks for the tip, 88 worked.

(Edit)  Put the framework in the Kracker App's Framework folder in the package contents.

I like to pull heists.

did you restart the app

and dont put it in your system folders doh

If that doesn't work, try placing the framework directly in the App's "Framework" folder (Open package contents on the app)

I'm not getting a connection on port 88, what server are you connecting to?

Edit: nevirmind, had to enter the actual IP address.

and the IP address?

*sigh

I pinged maczot.com in terminal and used the ip that came up.

64.38.44.157

This kracker program could take awhile.

I like to pull heists.

and away it goes...

At the consistent speed this is running over a 'net connection, I kinda wonder if it's actually talking with the server

ip: 64.38.44.157 -- got it

*sigh

Yup... nevir.. I think its just a simulation !!

ha, bingo, got the password, not too bad.  Not going to post it here, since ya gotta love the Zelda sound

However the password does not appear to be working in squirrelmail using either apps or apps@maczot.com as a username

what are you using for your username?...look in the address bar ;-)

Imagine maczot replying to all the requests if it were a real network connection

aapz4p

nick is the username

*sigh

Ok, soo we have to download the download the krakr (http://macheist.com/freebies/Krackr.zip), then insert the framework (http://austinsarner.com/files/NetConnect.framework) in the package contents, write the ip adress 64.38.44.157 with the port 88, until now the pass is aapz4p and the user's apps

I've tried every username I can think of (including appending @maczot.com to the end of every one of these):

apps
app
nick
nevir

nothing.

No, apps is the username.

I like to pull heists.

*grumble*

Help - I dont know how to to the ports part!

I got it work with "apps"

hey... just wanted to verify that the app isn't actually talking to the IP..
I'm behind a corporate firewall, but the app said it connected and is now in the process of checking passwords.

So it's not actually talking to the macZOT server.

I'll update you as i go along, but i'm 100% sure that port 88 is blocked by my company.

What do we have to do? email Nick about what?

Reply from Nick:

Thanks a lot for jerking me around like that. Screeew you, and forget
about my app on zot. Unbelievable.

- Nick

Let's see if Lisa comes through.

I like to pull heists.

Mini walkthrough:

Download Krackr and the NetConnect framework.  "Show Package Contents" on Krackr once you've downloaded and extrcated it - place NetConnect.framework inside Contents/Frameworks

open up Krackr, and use the following info:

64.38.44.157   port 88

Use port 88 it will run for a while but it will eventually figure it out.

The app's fake, I have little snitch enabled and it didn't even bothered to connect to the server.

I am completely unable to login with the given password and username 'apps' - this is frustrating

Edit Edit:  Lol, I'm dumb.

two a's  no two p's...

Sending nasty emails is fun!  Got a quick reply from Nick who's dropping his app from MacZot.  Now what?

Do we have to CC ourselves on the email to get the combo code?

Fiji

This is what is says when i try to open krackr after downloading it:
You cannot open Kracr as you are missing a vital hacking network

Scroll up to my reply with the "mini walkthrough"

I got the same reply, lets see when we hear from Lisa.....

got the same response- yea we'll see what lisa/code...etc

*sigh

Im confused as to how they are going to know who sent in the information to give us the code?

Did anyone spot the $4 off coupon for AppZapper in the inbox? (which works btw)

ha! "Screeew you"
I told him that he was only going to  get $1 from every sale.

$4 coupon works on the appzapper website

Nothing here, just random text.

Same response here

What do we do with the email after we get it?

Hmm... Is the Heist done already ?.. It was kind of easy .. suspiciously easy ??

When you clicked the link from the briefing page, you should have gone to : http://maczot.com/panel/index.php?key={your username}

that's how they know who logged in and who gets the prize.

So I guess were not going to see appzapper in the final bundle...:(

Yeah, I saw that.  Too bad I already have AppZapper.  Any reply from Lisa yet?

I like to pull heists.

Thanks anyway.  I don't get it - heists are over for me I guess.  I downloaded both aps and can't even get into Krackr.  It was fun while it lasted.

Here's what I sent to Nick, I signed it Brian. The really wierd part is, as I was doing the Heist, and sending an e-mail as Brian. I got a real e-mail from Brian from macZot....It's like he knew

On 12/8, 2006 at 11:32 AM apps@maczot.com wrote:
>    Nick,
>On second thought, macZot does not want to really deal with you. Maybe
you should find another source, like maybe the MacUpdate team. They suck
almost as bad as you.
>

Ahhhhh...Did not see that and still don't see that on the url bar ....no problem