Comments on: Sunwear hacks metasploit.com? http://www.thedarkvisitor.com/2008/06/sunwear-hacks-metasploitcom/ Sat, 24 Dec 2011 19:52:10 +0000 hourly 1 http://wordpress.org/?v=3.3.1 By: anon http://www.thedarkvisitor.com/2008/06/sunwear-hacks-metasploitcom/comment-page-1/#comment-604 anon Sun, 08 Jun 2008 12:03:22 +0000 http://www.thedarkvisitor.com/?p=594#comment-604 http://h4ck-y0u.org/viewtopic.php?t=48861 http://h4ck-y0u.org/viewtopic.php?t=48861

]]> By: superpig http://www.thedarkvisitor.com/2008/06/sunwear-hacks-metasploitcom/comment-page-1/#comment-598 superpig Tue, 03 Jun 2008 07:38:36 +0000 http://www.thedarkvisitor.com/?p=594#comment-598 http://photo.qq.com/portal/albumMain.shtml?%23uin=47347#uin=47347&albumid=302394660 he's photo very cool handsome http://photo.qq.com/portal/albumMain.shtml?%23uin=47347#uin=47347&albumid=302394660

he’s photo
very cool
handsome

]]> By: superpig http://www.thedarkvisitor.com/2008/06/sunwear-hacks-metasploitcom/comment-page-1/#comment-597 superpig Tue, 03 Jun 2008 07:36:10 +0000 http://www.thedarkvisitor.com/?p=594#comment-597 look here http://47347.qzone.qq.com discuz.phpwind.janker.topsec. sunwear all hacked look here
http://47347.qzone.qq.com

discuz.phpwind.janker.topsec.
sunwear all hacked

]]> By: superpig http://www.thedarkvisitor.com/2008/06/sunwear-hacks-metasploitcom/comment-page-1/#comment-596 superpig Tue, 03 Jun 2008 07:35:04 +0000 http://www.thedarkvisitor.com/?p=594#comment-596 他在中国是个很牛B的人物. 对windows kernel 相当了解. 很牛X的撒~ 他在中国是个很牛B的人物.
对windows kernel 相当了解. 很牛X的撒~

]]> By: Heike http://www.thedarkvisitor.com/2008/06/sunwear-hacks-metasploitcom/comment-page-1/#comment-599 Heike Tue, 03 Jun 2008 01:53:48 +0000 http://www.thedarkvisitor.com/?p=594#comment-599 HD, I have pasted you comment into the main body of the post. Thank you for clearing that up! HD,

I have pasted you comment into the main body of the post. Thank you for clearing that up!

]]> By: hehe http://www.thedarkvisitor.com/2008/06/sunwear-hacks-metasploitcom/comment-page-1/#comment-600 hehe Tue, 03 Jun 2008 01:10:51 +0000 http://www.thedarkvisitor.com/?p=594#comment-600 https://www.hackinthebox.org/modules.php?op=modload&name=News&file=article&sid=26882&mode=thread&order=0&thold=0 https://www.hackinthebox.org/modules.php?op=modload&name=News&file=article&sid=26882&mode=thread&order=0&thold=0

]]> By: HD http://www.thedarkvisitor.com/2008/06/sunwear-hacks-metasploitcom/comment-page-1/#comment-601 HD Tue, 03 Jun 2008 00:12:04 +0000 http://www.thedarkvisitor.com/?p=594#comment-601 The issue was that someone hacked a machine on the same subnet and was ARP spoofing the gateway. The metasploit.com machines were not compromised, but all HTTP requests coming into the ISP network were passed through a MITM defacer that inserted that HTML. Once I as able to set a static ARP entry and notify the ISP, the problem was resolved. So, to make things clear, the metasploit.com servers were not hacked, the ISP's network was. The issue was that someone hacked a machine on the same subnet and was ARP spoofing the gateway. The metasploit.com machines were not compromised, but all HTTP requests coming into the ISP network were passed through a MITM defacer that inserted that HTML. Once I as able to set a static ARP entry and notify the ISP, the problem was resolved. So, to make things clear, the metasploit.com servers were not hacked, the ISP’s network was.

]]> By: jumper http://www.thedarkvisitor.com/2008/06/sunwear-hacks-metasploitcom/comment-page-1/#comment-603 jumper Mon, 02 Jun 2008 20:14:12 +0000 http://www.thedarkvisitor.com/?p=594#comment-603 Thanks for the update! Hopefully we'll hear an official report of what happened soon. Thanks for the update! Hopefully we’ll hear an official report of what happened soon.

]]> By: mpg31337 http://www.thedarkvisitor.com/2008/06/sunwear-hacks-metasploitcom/comment-page-1/#comment-602 mpg31337 Mon, 02 Jun 2008 19:53:14 +0000 http://www.thedarkvisitor.com/?p=594#comment-602 Hello, This isn't a hoax. I went there to download the framework this morning and both metasploit.com and metasploit3.com would took me to the text page screen shotted above. After about 5 seconds I was then sent to the eviloctal forums. I went back a while later and it seemed "fixed", but then started happening again about 5 minutes after. Not sure if I was being load-balanced between hacked and not-hacked servers, or if they were re-compromised. Hello,

This isn’t a hoax. I went there to download the framework this morning and both metasploit.com and metasploit3.com would took me to the text page screen shotted above. After about 5 seconds I was then sent to the eviloctal forums. I went back a while later and it seemed “fixed”, but then started happening again about 5 minutes after. Not sure if I was being load-balanced between hacked and not-hacked servers, or if they were re-compromised.

]]>