fos private forum leak episode 3

[philie]

so episode 3 has 2 topics again, cause they are generally about the same thing.

first part is karmawar v0.5, 2nd is fada karma war

(sorry fada, but this one is too good to not get postet here. i did remove the download-url though, cause it still works.)

warning: if you are easily offended or gonna post stuff like "no one cares", DON'T READ IT.
avi and redi: you can comment here, but keep it clean or i will delete your posts.


karmawar v0.5

the first version of my automatic applaud/smite program is ready 

**url removed**

it works like that:
-gets your current session md5 from the clipboard
-builds urls with the applaud command and user-id of every FoS-member
-builds a url with the smite command for komo
-starts those urls with firefox

you need to do this:
-right click on anyones applaud or smite link and choose "copy url address"
-start karmawar.cmd
-close 18 tabs :/

things to do for next version:
-close the tabs automatically
-get the current session md5 without user-interaction
-stay in memory, wait 12 hours and then applaud/smite again
-gui for applaud/smite-list-management (lol)

any wishes or recommendations?


edit: this program was only made to show how such things could work.
USE AT YOUR OWN RISK!
when you use this program you might get banned.

okay, i made the legal and you the illegal version, but good job my hacker ! xD

gj but iam on mac right now and cant test xD

lol, seems great... but im not sure its working for me... it opened 18 tabs, but all said errod

-right click on anyones applaud or smite link and choose "copy url address"

have you make this step before opening it ?

omfg ahahah how you did this ?
I think we could code one in javascript, would be easy to open/close tabs !!!

omfg ahahah how you did this ?

i'm good in batch. havent coded in any other language for years.

btw: kinda important edit of my first post..

batch me some nice and hot girls please

                        $********    *$
                       $ *******.    *
                      $$******.*     *
                     $$...$***.*.    *
                      $..$$*****..   *$$$$$$$$$$
                       .$$***.*..   ..$$$$$$$$$$$$
                       .$$*****..   .$$$$$$$$$$$$$$$
                        $*****...   *$$$$$$$$$$$$$$$$$$
                       $****.*..    .$$$$$$$$$$$$$$$$$$$
                       $******..    *$$$$$$$$$$$$$$$$$$$
                      $$****.*.    .$$$$$$$$$$$$$$$$$$$$$
                      $****.**     *$$$$$$$$$$$$$$$$$$$$$$$
                     $$*****..     *$$$$$$$$$$$$$$$$$$$$$$
                     $******..    .$$$$$$$$$$$$$$$$$$$$$$$$
                     $*******.    *$$$$$$$$$$$$$$$$* *$$$$$$
                     $******..    *$$$$$$$$$$$$$$$*  **$$$$
                    .$****...     *$$$$$$$$$$$$$$     **$$$$$
                    $******..     *$$$$$$$$$$$*      .***$$$$
                    $*****..      *$$$$$$$*''          **$$$$
                    $*****..      *$$*'''   .   .    ..**$$$$$
                    *****...     *$$..      .   .    ...*$$$$$
                   $*****..      *$.....        .    ...*$$$$$
                  $******..     *$. .   ...       ..  ..*$$$$$$
                  $*****...     *.*...*****      *****..*$$$$$$
                 $*****...      *. . *      .   .     ..$$$$$$
                 $*****...      *.    ***   .     ****..$$$$$$$
                $******...     .*..         .         ..$$$$$$
               $$*****....     *....        .  .      ..$$$$$$
               $******....     **.....      .  .    ....$$$$$$
              $$******...     ***.....     ...      ...*$$$$$$
              ********...    ****....           .    ..**$$$$$
              $******...     ****.......    *..*     ..**$$$$$$      $$
             $*******...     ****.....            .  ****$$$$$$    $$$
             $*******...    .****.....       .       ****$$$$$$$$$ $$
            $********...    ******...    *..  ...*  ..***$$$$$$$$$$$$
            $*******...     ******...              ..****$$$$$$$$$
            $******...     ********..     ..   .  ..******$ $$$$$
            $*****...      ******* ***       *   ..*******
           $*****...     . *******.* **          .********
           $*****...    ..*********.*.**.. .    ..********      $$
          $$*****....  .. .*********.*..* ** **   *******      $$$
          $$***********   ***********        .     ********   $$$
          $***********.    ******$$$$$$$   *  *   *********$$$$$$
          $$********....     ***$$$$$$$$*****     **********$$$$
          $$*******...         *****$$$$$***       **********$$
          $$******...           *$$$$$$$$$***      **********..     $$
           $*******..            *$$$*$$$$$*****   *********$$..  $$$$
           $********..                $$$$$$$$$      *******$$$$$$$$$
           *$******...                  ***$$$$    *  ******$$$$$$$$$
            $****** . .        *        ********   *    ***$$$$$$$$$
            $******                        ****    *    **$$$$$$$$
            *$****... .     .* $$ .       ****    **     *$$$$$$$$$
             $$****...    . *$ $ ..          **      **** $$$$$$$$$$
             $$**...*... ***$$*. ...          *         ** *$$$$..$$$
             *$**......**.**$$$..             **         *  $$$$..$$$$   $$$
             *$*..*....*..$$..*                 *  **        *$$$....$$$$$$
              $*.*..*...*.$*...                   *  *         *$$$..$$$$$
               $$.*..*...$$$*$                                  *$$$..$
               .$.*..*.*..$$$*                     . *      .     $$$$$$ $$
                $.*..*.$$.$             **         . *      ..     *$$$$$$$
                $*.*..*.****          ******       ...   .   ..      *$$$
                $*..*..$$*.***.       ******        . *  ..  .        .$
                $*..*..$$..           ***..*.       .         ...       .
                $*.*.*$$***..         ******          *. ..              .
                ***.**$$$..*.           **            *  **...            .
                *$$***$$$$*** .                     . ** .*..              .
                 $***.$$$$***..                     .  * *               .**.
                 *$$.$$$***...                        *  ..              .****
                  **..$.$$$*$$*$$*$...              * ** *                ****
                  ****$$$**.**..*...                *  *   *..        **  ***
                  *$$$$$***$$**.*..                *  * **.....            *.
                   *$$$$$******                         * .$..*.           .
                   *$*******..*..*..* . *.    .. . * * *  *..**..*..      .
                    *************..**... **** .*       ..  **..*.         .
                    $*******.. *** $$ $ $$  *         ** .  ****.. .  .  *
                     ****************$$*              * * ..  *..      .'
                      $***************                 *.   .   *'*. .*
                      **************                  ***  *      **
                       ***************...           ***  *  **    .'
                        *****************....                **   *'
                        *****************      *   **    * *      $
                         $************* .* .     *. .     * * * . *
                         ***************       .*.            *....
                          $*************                *        ..
                          $************                          ...
                           ***********                         *  .*
                           *********          *.              *    ..
                           *********         **                 *  .*
                           $*********        *            *     *    *
                            ***..*..****   **          * *       *    *
                            $**..****.**.*.*  .        * *      * *    .
                            $....*****......*                    * *    *
                            $..*.*******.**.* .        *$*         **    *
                            ****.******* .  * .         $*       *. .    ..
                            *.****.** *     * .         $        .. .    ..*
                            $*******          .                             *
                            $*..*****                               .   * *  .
                           .$.**.*.*                    *           .   * *.  *
                           $*****                   * ** **          ..   *.  *
                          .$**.*             .        ** *           . .    * *
                          *$****           **           $$        . ..       *$
                          $*******                       $       .  . ..  ***$*
                         $****$**             **         *       .      ... $$.
                        *$.***$$.$            *..        *             ...*  $*
                        **********             **                        *   $.
                        $****$$*****           *                         *   $*
                       .$*.**$.**$****                                 ......$*
                       .$********.* ..                                  *    $*
                       ..*$.$****$*** . .*       *          **         ......$*
                       ******,*,****   . . *       **. . .. *          .....$$*
                       ****.******     .. *  *      * *. .**          ....$****
                       .$*..*******     .. .* *           *          .....***..
                       $***********  ..     *          . .             .*.*...
                       $*********     * *   . * **     * .           ...*.*...
                       $**.**.*.******.       ** *   .      $$       ..***.....
                      *$***.*....*****...        $$$$$$$$$$$$$$$    ...****
                      *$..*......*..... . **    $$$$$$$$$$$$       ..**.****.
                      $..*..******.* *     ** $$$$$$$$$$$$$$$$$$$ ....****.*. .
                      **.**********....   ..* .$$$$$$$$$$$$$$$$$ .*.*****.....
                      **********.....       * ..$$$$$$$$$$$$$$$***.******...
                     $**********....         **  $$$$$$$$$$$$$$*****...**.....
                     $*********......         * **$$$$$$$$$$$.**.**.******...
                     $********.......          **.*$$$$$$$$$$**.*****.***...
                    *$********.....            ..**.*$$$$$$$**.***.*.***...
                    $$$$$$$$$$.....             .*** $$$$$$*.******.****...
                    *********....               * **$$$$$$**************..
                   $********.....                *$$*$$$$$********.*...*...
                   $*********......              *$$$    *$*******.**...
                  $********.......               $$$*    *$********.....
                  $********......               $$$$     .$*********..
                 $*********.......       **    $$$$       $*********....
                 $*******......          **    $$$        **********.....
                .**** *.......           **   $$$         .$$$$$$$$$.....
                $******......            **   $$*          $********......
                $******.........        ***   $$           $********.....
               *$*******.........       ***** $*           .$******......
               $*******........         ****$$$             $*********......
               $*******.......          ****$$              $*********......
              $*******.........        *****$$              *$**********....
              $*******.......           ****$               *$************....
             .$*********........       ****$.               .$**********.....
             *$**********.......       ****$                 $**********.....
             $$*********.......       ****$.                 $*********.....
            .$*********.....           **$$                  $***********....
            .$*********......         ***$                   $*********.....
            *$*********...            ***                     $*******.....
            $*********.....           *$$                     $*******.......
           .$*********....          ***$                      *$*********.....
           $********.......         **$.                      .$********....
          .$********....             *$                        $*********.....
          $*******.......           *$.                        $*********......
         .$*******........          $$                         $**********.....
         $******* .......           $                          *$********......
        .$*******.......           $.                          .$*********.....
        $********........         $$                            $********....
       .********* .......        $.                             $**********....
       $********** ......    .   $.                             $**********....
       $********* .....      .  $.                              .$***********..
      $**********......      ..$.                                $*********....
      $********* ........     $$.                                 $********....
     $********* .........     $$                                 .$********....
     $********* .......       $.                                  $*******...
     $******** .......        $                                   $*******....
     $*******..........       $                                   $*A******....
    .$*******......          $.                                   .$***********
    .$*******........        $..                                   $$*********.
    $*******......          $.                                     $$*********.
   .$*******........        $                                     $$$********
   $********.......        $.                                     $$********
   $********.....          $                                      $$$*******
   $*******.....          *$                                      $$$*******
  $*******.......       ***.                                      $$******..
  $******.*....       ***$$                                       $$*******.
 $*******.*......     ***$.                                        $********
 $********.....      ****$                                         $********

lol not bad but you forgot steaks and beers for all FoS members

brought you some beers

                            ___                                  
                          .'   '.                                
                         /       \           oOoOo               
                        |         |       ,==|||||               
                         \       /       _|| |||||               
                          '.___.'    _.-'^|| |||||               
                        __/_______.-'     '==HHHHH               
                   _.-'` /                   """""               
                .-'     /   oOoOo                                
                `-._   / ,==|||||                                
                    '-/._|| |||||                                
                     /  ^|| |||||                                
                    /    '==HHHHH                                
                   /________"""""                                
                   `\       `\                                   
                     \        `\   /                             
                      \         `\/                              
                      /                                          
                     /                                           
                    /_____                                       
                                                                 

sry, steaks are all out, but ne1 want a burger?

lol you're the best ^^

[philie]

FFFFFFFFFFF                 OOOOOOOO
F                                O                   O
F                             O                         O
FFFFFFFFFFF         O                             O
F                          O                               O             S
F                          O                              O
F                          OOOOOOOOOOOOO
F

huahauha nice xD

worked here

lol angus nice pro ''s'' in FoS ascii

accordingdo organised smiting from b2b against alien: would it be possible for you to write a b2b smite script, like for fos?

i want my f@#!ing revenge....everyday !!!!! xDDD

ahhh nvm, to make a batch for b2b just only cause they smited me 5 times is a bit too serious...i can take it very good, so let it ! lol

ahhh nvm, to make a batch for b2b just only cause they smited me 5 times is a bit too serious...i can take it very good, so let it ! lol

nah its not too serious, lets smite back.i mean this was a clear challenge right in our face. now we need to answer,  with or without smite script

let's see if the FoS brotherhood agrees...then okay ;p

we can get revenge sure... who do we need to put a hit on?

sure, no problem. what were you thinking off? all of b2b or just some special people?

I hope it sends to you our session ID so you can hax us

I hope it sends to you our session ID so you can hax us

ahm, nope.

sure, no problem. what were you thinking off? all of b2b or just some special people?

hm to make sure we hit the right one: lets smite all

you should make a java deamon that start up with pc. You do some http post so you don't have to open an internet browser. And you can make it automatically :p.

zip it seems u r hacker, but u just give good tips m8, tell him as to do ae plz

zippeurfou, i'm looking for a way to sniff the session id. any ideas?

Well there is one easy way:
go to the user page and get the information.
Example:
https://www.tus-wa.com/forums/profile/NinjaCamel/
(https://www.tus-wa.com/forums/profile/userName/)

if you parse the source code:
   <i><a href="https://www.tus-wa.com/forums/pm/?sa=send;u=133" title="Personal Message (Offline)"><img src="https://www.tus-wa.com/forums/Themes/default/images/useroff.gif" alt="Offline" align="middle" />

Another way to reach camelo profile is to do like that:
https://www.tus-wa.com/forums/profile/?u=133
Then you go and parse for:
<title>View the profile of NinjaCamel</title>

Maybe there is better way need to think a bit about it

i love you fada, i mean not love like i love avirex

fail, dude.
i know how the get the user id. i was thinking of the session md5.
for example: my current url for smiting you:

https://www.tus-wa.com/forums/private-members-only!/karmawar-v0-5/15/?action=modifykarma;sa=smite;uid=840;m=80647;sesc=71d2e8d2df77ead42589d2eded51ba2e

your user id
it never changes

my session md5
changes every 12 hours

my program gets your session md5 from the clipboard. that's why you have to copy anyones applaud/smite url before using it.
i can make it stay in memory and applaud/smite again after 12 hours. but i'd need the new session md5. this time without user-interaction, or going resident makes no sense.
you know now, what i mean?

Do a http get request on a webpage and parse the sesc.
Example:
GET: www.tus-wa.com
Parse: https://www.tus-wa.com/forums/logout/?sesc=

   <a class="hide" href="https://www.tus-wa.com/forums/logout/?sesc=XXX" onclick="return confirm('Are you sure you want to logout?')">Logout</a>

You'll get it.
If the user did disable cookies or the "remember me forever".

You might have cookies problems. In that case write your owns

hm, ok, too easy 
now you really helped me out, lol
next version coming up, if i find some more time..

Same here i'm a lazy ass lol.
Btw with my last post you could customize your app to add people you want to smite/applaud just  by giving their nickname lol.

Leroy: Lol@FoS look latest karma log, every1 who gets applauded is in FoS. Oldbeast he hasnt posted since months and gets applauded? not to mention the campaign against Komo it's obviously FoS smiting him. f@#! fos and whoever is in (many friends there but idc)

Leroy: fking buttlickers go jump the bus homos lol

-----------------

lol nice shoutbox comment of him ! ;O

lololo leroy needs to nbe added in the smite script^^

you could customize your app to add people you want to smite/applaud just  by giving their nickname lol.

good idea. on the to-do-list now.

meanwhile:

how to add users for applaud/smite to v0.5 for noobs

you need the user id. zip showed you how to get it: go to the persons profile. the "Send this member a personal message." link shows at last "u=xxx". that's it.
make a .txt file in the files directory and write

https://www.tus-wa.com/forums/?action=modifykarma;sa=applaud;uid=xxx;sesc=

for applaud, or

https://www.tus-wa.com/forums/?action=modifykarma;sa=smite;uid=xxx;sesc=

for smite

rename the .txt to "anynick"
open karmawar.cmd with a text-editor. you can see 2 main parts.
add these two lines to the specific part (you'll see):

for /f "tokens=6 delims==" %%i in (secs) do <nul (set/p a=%%i) >>filez/anynick

for /f %%a in (filez/anynick) do start firefox %%a > nul

save file and you're done.

Don't know if you intend to use bash for the autosmite every 12 hours. But be carefull, you certainly will have to play with cookies.
You still can ask for the user + password in your soft and post it to get a good cookie

i dont know yet, but i think i'll switch to something else.
most of all because of the gui for applaud/smite-list-management 

ok here's some more help:
DO a GET:

GET /forums/index.php?/ HTTP/1.1

You'll get the PHPSESSION ID

then  do a post like that:

POST /forums/login2/ HTTP/1.1

Accept: application/x-ms-application, image/jpeg, application/xaml+xml, image/gif, image/pjpeg, application/x-ms-xbap, application/x-shockwave-flash, application/vnd.ms-excel, application/vnd.ms-powerpoint, application/msword, */*

Referer: https://www.tus-wa.com/forums/index.php?/

Accept-Language: fr-FR

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; MDDC; InfoPath.2; .NET4.0C; .NET4.0E)

Content-Type: application/x-www-form-urlencoded

Accept-Encoding: gzip, deflate

Host: www.tus-wa.com

Content-Length: 64

Connection: Keep-Alive

Cache-Control: no-cache

Cookie: __utmc=1; PHPSESSID=XXXX; __utma=1.425524435.1312235427.1312235427.1312235427.1; __utmb=1.1.10.1312235427; __utmz=1.1312235427.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none)



user=YYY&passwrd=PPPP&cookielength=-1&hash_passwrd=


And you're good :p

rofl too complicated for camelo

same goes for alieno

ditto

over avio's head too.. how bout u nino? huahuha

accually, i told him how to do that. 

ok zipp, so i just need to break mozillas cookie encryption, search through all of them (1462 here) till i find the tus 1 and then i got the session id 

i think i'd stick to getting the page and pulling it outta there. at least the session id is there in plain text.
but anyway i guess i'm way to lazy (at least atm).

lol @ every1 else 

Well I had the free night so I did it in java.
I have the sesc, if I got time I'll do the rest otherwise I'll give you my source code .
:p

the rest is easy. finish it dude, i suck at java.

whos smiting whole b2b rofl?

FoS !

lolo thats me
time to fight back

rofl komo is the only cockface there

friends of cockfaces got smitten aswell, and dead got his smite cause he insulted my brother

stop to smite my friends peja !

stop to smite my friends peja !

« Last Edit: Today at 03:44 pm by Peja »

lol

HAUHAUHAUHA gj peja xD

the funny thing is: i added "i love komo" or something like that. and just reedited to first words of alien

rofl you liar peja ! ;p

by peja :dont call others liar when you are the one who is lying !

by alien : ok mod master peja trololo roflmfao xD

by peja: lololo i love you alien, your awesome

by alien : i love your hairy ass too lololoooo

by Peja: cool im gonna sent u a pic

by alien : of what...your hairy ass ? <3 lol

by Peja: sure and off my hairy penis

by alien : omfg pure orgasm ! can't wait to see it ! huahuahau O.O

by peja: but maybe im waiting for tus sexy league

by alien : ok, i will wait with you !

by philie: i wont



by Peja: this not my dick or? my foreskin is much bigger!

by alien : rofl f@#!ing pervert and it is your dick for sure ! xD

[philie]

fada karma war

Well everything is working.
Just the ui is very ugly but I'm quite lazy now i'll change it later.
peace !
**url removed**

lmfao sweet XD

ROOFFFLL this shit workkk very well... i just owned rOx lol


I will tdc now huhuahu

btw I can show you the source code if you're worried about giving your pw and stuff.

lol nice prog fada

gj man

lmao this is awesome boys xDD

btw have you progged a FoS smite barrier ? o.O
if this prog comes to the wrong hands...i don't want to imagine xd

lolo im 2 dumb for it, wanted to smite b2b and applaud fos in 1 turn and also make some b2b memebrs not smitting. dunno what happened i just saw i applauded all b2bs

I'll do a better version when I've got some time:
*Less memory usage.
*A better interface
*Impossible to smite TdC or FoS
*Extra feature ?

btw it is case sensitive which means if you type:
b2b;fos;TdC => won't work for fos because it is FoS .

if you want to stop it just do a ctrl+alt+supr and get karmawar.exe

if you have idea to improve it i'm ok

*Extra feature ?

an option for automatic smiting/applauding again after 12 hours.

lol it is automatic dude .

Edit: you mean you want to be able to "not" smite/applaud every 12 hours ?
Because as it is done the app run in background and will smite applaud every 12 hours

rofl

yeah i already found that out, you guys didnt check how our karma increased?

nope still hanging on +60 since 1 week lol

i dont think this prog is working for me (

help plz

sez "error, jave runtime environment could not be found"

http://www.java.com/en/download/index.jsp

ahh yes, im stupid... i googled it.. works now, but thnx phillie ...

now let me test this prog

rofl avi...installing java for java progs helps much xD

and a big rofl at komo's shoutbox comment of b2b smite attack of FoS ! x'DDD

-------

Komito: Wtf @ Karma...

Komito: Seriously, why are you smiting KRD and Mablak and rest lol, they are all innocent lol

aahahahah good one !!!

Fada, can't you make a web version of this prog in JS ?
So we could host it somewhere, protect its access by a password .. !

I can design the GUI if you need

muhuahuaha fos became a businessssssssssssssssssssss huahuahauhuaha

it makes me so proud how far FoS has come.. i never imagined whent first creating this that we would turn into an empire!! but we have!! and i have a special FoS love for you all!! huahauhauhauhah


F<3S4LiF3

it makes me so proud how far FoS has come.. i never imagined whent first creating this that we would turn into an empire!! but we have!! and i have a special FoS love for you all!! huahauhauhauhah


F<3S4LiF3

woohooooo!!
i love
F<3S

just made me a new sig.
if you like it, i got an idea with it:
lets all take this sig for a week or so, so in any thread ppl can see the same F<3S everywhere.
then switch back to our normal sigs.

lol..im in... post the img shack link

xD

lol awesome

Seems MI found it out ^^ (https://www.tus-wa.com/forums/tus-discussion/tus-joins-karma-actions/msg81533/?topicseen#new)I should have made it more random ^^.
I won't get in a fight with MI who runs our beloved website.
Which mean I won't do any new release .

i agree.... eveyone disable the karmawar prog!!


cntrol + alt + delete = end task of karma war.


maybe in some time we can go on a less suspicious attack on a select few, but for now, please everyone disable the karma war attack.

zipps right, monkeyisland is the boss!!

Let's help poor peja to get at least 0 karma ^^ but not with my prog.
Anyway, you won't see the version I was doing which had really cool feature lolo like spamming shoutbox I'm dumb if you smite TdC or FoS and sending 200 pm to yourself with: "Don't f@#! with me" lol ^^.
This was fun but let's be fair and not start a war against mi

wee i got smited by tus, thats cool

uhauhahuhauhauhauha peja got owned!!

roflllol nice job pejaxD hahah!! gjgjhuhuhuhuu

lmao!!!!

ooomggg pejaaaaa

lmao gj avirex calling your smites, its funny lol, we need to this for every komo post

huahuauha i will...

nice dbl smite @ ramone lol

im not sure why the karma system is even still around, its been causing nothing but drama since the start, but i dont wanna say anything, because its kinda entertaining and funny to see everyone bitch so much about it..


if u ask me, MI secretly likes the drama, or he would have removed it ages ago... he prolly thinks the smite script is priceless and LOLing deep inside

lmao u get smitten like hell for your ramone post:) soon you wil reach my karma^^

FoS in action, lol

https://www.tus-wa.com/forums/tus-discussion/tus-joins-karma-actions/msg81587/#msg81587

lmao

Quote from René
Quote

    Actually I don't see what FoS is either. From my outside point of view it's just a group of trolls who share porn with each other and smite Komo because it's fun when he gets mad. Or did I miss something? No offence boys, you know I love you.

rooooooooooooofl to bad i wasn't there this time xD