[FIXED] Possible account trading exploit

dionysvs

Link method disabled, link only works temporarily now.

Note for sellers: i was looking around for safe ways to sell/buy an acct, there are some 3rd party sites that provide guarantees not sure how those work, but if the buyer pays via paypal they can easily do a chargeback either to paypal directly or to the credit card company and theres nothing you can do

AssassinwithRPG

Fuck just checked this. Please take this thread down. Notifying about this is great and all but this exploint will do more damage than good. Thanks.

[email protected]

oh my then dont trade ur acc lol. paypal will just ban ur acc for a trade like this ne ways read the paypal tos.If u get scammed your screwed Ive had it happen b4.

dionysvs

AssassinwithRPG replied at 2016-4-26 20:16
Fuck just checked this. Please take this thread down. Notifying about this is great and all but this ...

i get that but a lot of players already use this link method in everyday playing so its better for everyone involved to be aware of the risks
also, ive tested this on CN too and it doesnt work because you dont get the direct login link with source, it might work for UN since they are both joyfun?

AssassinwithRPG

dionysvs replied at 2016-4-27 01:22
i get that but a lot of players already use this link method in everyday playing so its better for ...

Its a fucking link, it can be edited you are aware, gaining access to other accounts. This is an exploit which can result in not scamming but "hacking". That ain't something you should notify people about but the support. Or at least edit the thread so you don't show to do it.

dionysvs

AssassinwithRPG replied at 2016-4-26 20:27
Its a fucking link, it can be edited you are aware, gaining access to other accounts. This is an e ...

thats next to impossible, not only would you need the right combination of time, server, acct id number, the sign in detail is more than 20 characters by itself

AssassinwithRPG

dionysvs replied at 2016-4-27 01:29
thats next to impossible, not only would you need the right combination of time, server, acct, the ...

I agree with that. But I don't want bs flowing into forum. There is another way of using this that would be a lot more efficient than just typing stuff in.  I ain't saying shit though. Gonna  mess with it though to see the potential it has.

Massive security flaw.

dionysvs

AssassinwithRPG replied at 2016-4-26 20:33
I agree with that. But I don't want bs flowing into forum. There is another way of using this that  ...

ive removed the exactly how to get the link, but a lot of ppl know this already, ive seen ppl mention it before and one guy even posted his link in an image without knowing it can be used to access his acct

AssassinwithRPG

dionysvs replied at 2016-4-27 01:38
ive removed the exactly how to get the link, but a lot of ppl know this already, ive seen ppl ment ...

Appreciated if they have this type of security flow I wonder how easy it would actually to gain access to admin panel...no joke, gg getting fucking stupid now.