# DriftNation got PWN3D

**URL:** <https://forums.speedlife.net/t/driftnation-got-pwn3d/82582>\
**Category:** SON240sx Automotive\
**Created:** [December 20, 2004, 7:20pm UTC](https://forums.speedlife.net/t/driftnation-got-pwn3d/82582 "2004-12-20T19:20:39Z")\
**Posts on this page:** 20\
**Page:** 1

<div class="post-metadata">

**Author:** ![iQuAGoD](https://avatars.discourse-cdn.com/v4/letter/i/f05b48/32.png) [@iQuAGoD](https://forums.speedlife.net/u/iQuAGoD)\
**Post date:** [December 20, 2004, 7:20pm UTC](https://forums.speedlife.net/t/driftnation-got-pwn3d/82582/1 "2004-12-20T19:20:39Z")

</div>

I was trying to go logon to the DriftNation forum when i found this…

[http://www.driftnation.com](http://www.driftnation.com)

It appears they have been pWn3d. ☹

---

<div class="post-metadata">

**Author:** ![NeveR](https://avatars.discourse-cdn.com/v4/letter/n/e95f7d/32.png) [@NeveR](https://forums.speedlife.net/u/NeveR)\
**Post date:** [December 20, 2004, 7:30pm UTC](https://forums.speedlife.net/t/driftnation-got-pwn3d/82582/2 "2004-12-20T19:30:12Z")

</div>

That’s harsh.

---

<div class="post-metadata">

**Author:** ![enyaw](https://avatars.discourse-cdn.com/v4/letter/e/a8b319/32.png) [@enyaw](https://forums.speedlife.net/u/enyaw)\
**Post date:** [December 20, 2004, 8:01pm UTC](https://forums.speedlife.net/t/driftnation-got-pwn3d/82582/3 "2004-12-20T20:01:22Z")

</div>

errr yeah…

the webmaster is in Cali…

It’ll be back up shortly

---

<div class="post-metadata">

**Author:** ![nocwage](https://yyz2.discourse-cdn.com/flex034/user_avatar/forums.speedlife.net/nocwage/32/5489_2.png) [@nocwage](https://forums.speedlife.net/u/nocwage)\
**Post date:** [December 20, 2004, 8:14pm UTC](https://forums.speedlife.net/t/driftnation-got-pwn3d/82582/4 "2004-12-20T20:14:14Z")

</div>

Hax0r3d!!  
What a shitty hosting service…  
or you guys used a crappy password ☹

---

<div class="post-metadata">

**Author:** ![iQuAGoD](https://avatars.discourse-cdn.com/v4/letter/i/f05b48/32.png) [@iQuAGoD](https://forums.speedlife.net/u/iQuAGoD)\
**Post date:** [December 20, 2004, 9:39pm UTC](https://forums.speedlife.net/t/driftnation-got-pwn3d/82582/5 "2004-12-20T21:39:06Z")

</div>

If I was gonna hack a site I would at least put something funny on the main page… Thats lame.

---

<div class="post-metadata">

**Author:** ![Sasha\_SG](https://yyz2.discourse-cdn.com/flex034/user_avatar/forums.speedlife.net/sasha_sg/32/5477_2.png) [@Sasha\_SG](https://forums.speedlife.net/u/Sasha_SG)\
**Post date:** [December 21, 2004, 4:59am UTC](https://forums.speedlife.net/t/driftnation-got-pwn3d/82582/6 "2004-12-21T04:59:14Z")

</div>

Clearly gay town.

Fags.

---

<div class="post-metadata">

**Author:** ![nocwage](https://yyz2.discourse-cdn.com/flex034/user_avatar/forums.speedlife.net/nocwage/32/5489_2.png) [@nocwage](https://forums.speedlife.net/u/nocwage)\
**Post date:** [December 21, 2004, 8:13am UTC](https://forums.speedlife.net/t/driftnation-got-pwn3d/82582/7 "2004-12-21T08:13:44Z")

</div>

It looks like it was “hacked” by an automated script…  
even lamer  
I’d suggest switching hosting if it wasn’t their own fault.

---

<div class="post-metadata">

**Author:** ![roast](https://yyz2.discourse-cdn.com/flex034/user_avatar/forums.speedlife.net/roast/32/5498_2.png) [@roast](https://forums.speedlife.net/u/roast)\
**Post date:** [December 21, 2004, 9:34am UTC](https://forums.speedlife.net/t/driftnation-got-pwn3d/82582/8 "2004-12-21T09:34:42Z")

</div>

…

all i have to say is… script.

---

<div class="post-metadata">

**Author:** ![Simich](https://avatars.discourse-cdn.com/v4/letter/s/bb73d2/32.png) [@Simich](https://forums.speedlife.net/u/Simich)\
**Post date:** [December 21, 2004, 10:58am UTC](https://forums.speedlife.net/t/driftnation-got-pwn3d/82582/9 "2004-12-21T10:58:21Z")

</div>

My site got the boot as well ☹

---

<div class="post-metadata">

**Author:** ![Racer\_XTREME](https://avatars.discourse-cdn.com/v4/letter/r/e47c2d/32.png) [@Racer\_XTREME](https://forums.speedlife.net/u/Racer_XTREME)\
**Post date:** [December 22, 2004, 5:38am UTC](https://forums.speedlife.net/t/driftnation-got-pwn3d/82582/10 "2004-12-22T05:38:13Z")

</div>

I heard on the radio, that there is a worm going around that searches through google, for message boards with a vaunrable version of it, and hacks it automatically.

---

<div class="post-metadata">

**Author:** ![DTS](https://avatars.discourse-cdn.com/v4/letter/d/8491ac/32.png) [@DTS](https://forums.speedlife.net/u/DTS)\
**Post date:** [December 22, 2004, 7:21am UTC](https://forums.speedlife.net/t/driftnation-got-pwn3d/82582/11 "2004-12-22T07:21:42Z")

</div>

> This site is defaced!!!
> 
> * * *
> 
> NeverEverNoSanity WebWorm generation 5.

---

<div class="post-metadata">

**Author:** ![roast](https://yyz2.discourse-cdn.com/flex034/user_avatar/forums.speedlife.net/roast/32/5498_2.png) [@roast](https://forums.speedlife.net/u/roast)\
**Post date:** [December 22, 2004, 8:17am UTC](https://forums.speedlife.net/t/driftnation-got-pwn3d/82582/12 "2004-12-22T08:17:08Z")

</div>

hrmm… I wonder what sites are vunerable…

---

<div class="post-metadata">

**Author:** ![nocwage](https://yyz2.discourse-cdn.com/flex034/user_avatar/forums.speedlife.net/nocwage/32/5489_2.png) [@nocwage](https://forums.speedlife.net/u/nocwage)\
**Post date:** [December 22, 2004, 8:17am UTC](https://forums.speedlife.net/t/driftnation-got-pwn3d/82582/13 "2004-12-22T08:17:21Z")

</div>

[http://news.zdnet.com/2100-1009\_22-5499725.html](http://news.zdnet.com/2100-1009_22-5499725.html)

---

<div class="post-metadata">

**Author:** ![mr200](https://yyz2.discourse-cdn.com/flex034/user_avatar/forums.speedlife.net/mr200/32/5495_2.png) [@mr200](https://forums.speedlife.net/u/mr200)\
**Post date:** [December 22, 2004, 8:47am UTC](https://forums.speedlife.net/t/driftnation-got-pwn3d/82582/14 "2004-12-22T08:47:42Z")

</div>

yup, our site has been hit by it a few times. We’re not sure what happened exactly, but the admin figures we were hacked through our old database, which was still up as an archive.

---

<div class="post-metadata">

**Author:** ![Simich](https://avatars.discourse-cdn.com/v4/letter/s/bb73d2/32.png) [@Simich](https://forums.speedlife.net/u/Simich)\
**Post date:** [December 23, 2004, 6:47pm UTC](https://forums.speedlife.net/t/driftnation-got-pwn3d/82582/15 "2004-12-23T18:47:38Z")

</div>

Directly from a post at [phpbb.com](http://phpbb.com):

> I’m bumping this as a further reminder to all users to **UPGRADE TO 2.0.11** if they haven’t already. If you visit or know of a phpBB board running versions below 2.0.11 please contact the admins/moderators of that board and tell them of 2.0.11.
> 
> Today another wonderful experiment in how to do harm seems to have been unleashed, the Santy.A worm. This little perl script makes use of the highlighting exploit to deface sites running phpBB pre-2.0.11.
> 
> In the past I’ve been against the inclusion of any ACP based “new version” system for various reasons; bandwidth here and most of all privacy issues (and how some will claim we’re using it to “track” installations). This situation is however leading to a change in stance on this.
> 
> However that won’t help the current situation, nor I suspect will it impact a majority of the current 2.0.x userbase (who would need to upgrade to get any such funtionality!). We still get posts from users running versions of phpBB released two years ago … it’s essential that admins/owners of boards take some responsbility for the software they use. So again, if you haven’t upgraded, or know of a board that hasn’t, please do the right thing.

Take it easy guys.

---

<div class="post-metadata">

**Author:** ![roast](https://yyz2.discourse-cdn.com/flex034/user_avatar/forums.speedlife.net/roast/32/5498_2.png) [@roast](https://forums.speedlife.net/u/roast)\
**Post date:** [December 28, 2004, 9:47pm UTC](https://forums.speedlife.net/t/driftnation-got-pwn3d/82582/16 "2004-12-28T21:47:17Z")

</div>

Admin’s… DO it!

I’ve patched a few boards already and yes your boards are vunerable.

---

<div class="post-metadata">

**Author:** ![bing](https://yyz2.discourse-cdn.com/flex034/user_avatar/forums.speedlife.net/bing/32/7211_2.png) [@bing](https://forums.speedlife.net/u/bing)\
**Post date:** [December 28, 2004, 9:59pm UTC](https://forums.speedlife.net/t/driftnation-got-pwn3d/82582/17 "2004-12-28T21:59:29Z")

</div>

i am sure we will get hit…lol

ANDREW!!! you arent in school right now dude… DOO EET

---

<div class="post-metadata">

**Author:** ![TM1](https://yyz2.discourse-cdn.com/flex034/user_avatar/forums.speedlife.net/tm1/32/5517_2.png) [@TM1](https://forums.speedlife.net/u/TM1)\
**Post date:** [December 28, 2004, 10:51pm UTC](https://forums.speedlife.net/t/driftnation-got-pwn3d/82582/18 "2004-12-28T22:51:33Z")

</div>

I asked DRE to do it about a week ago, hes our webmaster…

I suppose I can do it tommorow, I know how, but I don’t wanna break stuff. 🙂

- Andrew, signing in from TM headquarters.

---

<div class="post-metadata">

**Author:** ![bing](https://yyz2.discourse-cdn.com/flex034/user_avatar/forums.speedlife.net/bing/32/7211_2.png) [@bing](https://forums.speedlife.net/u/bing)\
**Post date:** [December 28, 2004, 10:57pm UTC](https://forums.speedlife.net/t/driftnation-got-pwn3d/82582/19 "2004-12-28T22:57:15Z")

</div>

^^^

eeeeeeewwww bob and andrew are together at 2am on a tuesday night… gross

---

<div class="post-metadata">

**Author:** ![TM1](https://yyz2.discourse-cdn.com/flex034/user_avatar/forums.speedlife.net/tm1/32/5517_2.png) [@TM1](https://forums.speedlife.net/u/TM1)\
**Post date:** [December 28, 2004, 11:14pm UTC](https://forums.speedlife.net/t/driftnation-got-pwn3d/82582/20 "2004-12-28T23:14:52Z")

</div>

> [@bing](#):
>
> ^^^
> 
> eeeeeeewwww bob and andrew are together at 2am on a tuesday night… gross

So was Pavel actually…

[Next page](https://forums.speedlife.net/t/driftnation-got-pwn3d/82582.md?page=2)
