fkn0wned archive

FkNCrypter Public — inSpired's FUD Crypter Release Thread

A member releases his own crypter to earn a spot on the security team, and the whole forum shows up to test it live.

In this Server & Computer Security thread, member inSpired released 'FkNCrypter,' a homemade file-crypting tool, partly as an informal audition for the site's Security Crew. Founder TuxifieD reopened the thread and vouched for it publicly while inviting members to debug/scan it, sparking a back-and-forth of virus-scan reports, sandbox results, and reassurances about whether the tool was safe or backdoored. The thread shows the classic 'cheat scene' crypter-release ritual: version updates, changelogs, credit lists, and community members testing detection rates against 2009-era antivirus engines. It's a good time capsule of the site's tech/security subculture and the trust dynamics around homemade tools.

REOPENNED: InSpired is trying out for the security team, feel free to debug his application but I have no reason to believe he would post a backdoored application— TuxifieD

If this work , you have my vote to be on the team! Also , can any1 confirm it works— DvS

ZOMG thanks dawg!— xfallout

Blind SQL Injection Tutorial (lulraep)

A vintage blind SQLi walkthrough that a member swore he'd been writing since 2007 — and half the thread just wanted to know if it'd get you caught.

Long-time member lulraep posted a detailed blind SQL injection tutorial in the Server & Computer Security subforum, walking through finding vulnerable sites via Google dorking, testing for injection, enumerating columns and tables, and pulling admin credentials from a real (already-defaced) live example site. The thread has the classic early-2010s cheat-forum tone: casual profanity, 'educational purposes only' disclaimers, and a mix of gratitude, minor accusations of leeching content from other hack forums, and a technical rebuttal from conTagious about proper input sanitization. A side discussion touches on operational security (using proxies, worrying about IP exposure) and the tutorial evidently circulated for years, with replies trickling in as late as February 2010.

gtf back to usenet— lulraep

haha, no mate i actually wrote this. and i'm on a LOT of hack forums.— lulraep

Meh, almost any decently designed website will have a real escape string or strip slashes ...— conTagious

Unhackable Laptops?

Aussie year-9 kids vs. their government-issued Lenovo netbooks — a forum full of teens plotting to break their own school laptops

Started by majrbrawl, this thread is a group effort by Australian high schoolers (several from the same school) trying to bypass the lockdown on their government-issued Lenovo S10e netbooks handed out under a national year-9 laptop program. Members swap theories on BIOS resets, cold boot attacks, sticky-keys/cmd tricks, and hardware tampering, while debating whether the school's 'intrusion detection' and monitoring claims are even real or just scare tactics. It's a fun time-capsule of early Windows 7-era school IT lockdowns and the DIY hacker curiosity of bored teenagers, with a running joke about stealing a WA kid's laptop and micro-soldering a new BIOS chip.

where there is a will there is a way— lulraep

since when did schools give a shit about their IT equipment?— lulraep

if your tech people are anything like the tech people in my school. you could get away with ANYTHING. i mean ANYTHING.— lulraep

iStealer 5.0 Source Release Thread

The infamous password-stealer tool's source code got dumped on Fkn0wned — and everyone just said 'thanks' and moved on.

A veteran member, f0wh, posted a link to the source code for iStealer 5.0, a widely-known password-stealing tool of the era, noting the original 5.0 release had turned out to be fake and framing this as the 'real' fix for detection issues. The thread reads like a classic forum drop: a wall of one-word 'thanks/ty/nice share' replies from a mix of regular members, VIPs, and a couple of banned users, with barely any actual discussion of the tool itself. One reply jokingly suggested spinning up a forum-branded version called 'FkNStealer.' It's a small but representative snapshot of the site's Server & Computer Security section and its cheat/tool-sharing culture.

I have not tested this myself as I don't have much time left before the bomb explodes, but here's the download link— f0wh

Time to make a fknsec version of iStealer, called FkNStealer. :3— OhUGuise

That's hotter than pr0n. Thanks.— ap3x

[Question] Website Management

Guy has stolen admin logins but no idea where to type them in — the forum happily walks him through it

A member called lam3r posts in the Server & Computer Security board asking how to actually use a set of cracked admin credentials when he can't find any login page for the target site. Fellow members ([FkN] Crew and Security Crew regulars) jump in with casual advice on port scanning, SSH/FTP connection tools, directory-mapping utilities, and eventually mention spawning a shell via SQL injection to explain why FTP access wasn't working. It's a snapshot of the site's late-2009 tech/security culture: matter-of-fact talk about breaking into other people's websites, treated like everyday troubleshooting.

It sucks cuz i have the password + usernames cracked but nowhere to use them xD Help me pl0x!— lam3r

I spawned a shell via sql injection on the server and reasons above is probably why its not working.— wrynx

manifestation-verte.ch - defaced

Nix got bored one December morning and defaced a website — just for the screenshot bragging rights.

Member Nix posted a brag thread about defacing the site manifestation-verte.ch, describing how the admin accounts were locked out and a new admin account created, with a screenshot as proof. Nix was explicit about not deleting any data, which drew some ribbing from fellow member ap3x about the point of a 'harmless' defacement. The thread got a handful of casual congratulatory replies from other crew/mods, typical of the forum's cheat/hacking-scene bravado, capped off by Kimmi (a Smod) gushing admiration a week later.

Well I didn't have any better to do... Okay here's wut I did: - Disabled all the administrative accounts inside the ACP - Made a new admin account and gave it full access - Didn't delete anything.— NIX

I don't get it... you defaced without deleting any data?— ap3x

I WANT TO LEARN I WANT TO BE AS GOOD AS U— Kimmi

NIX Defaces atomkraftneindanke.ch — Security Crew Brag Thread

"Took it by tha ballz today" — NIX drops a defacement screenshot and the Security Crew immediately asks for the method.

A short bragging-rights thread from the [FkN] Security Crew where member NIX posts a screenshot proving they'd defaced the site atomkraftneindanke.ch, claiming they only replaced the index page and left everything else alone. Fellow members (ap3x, xcF) rib him for not shouting it out first and ask for their own defaced copies, while others (reflexez, wrynx, Kimmi) chime in with congrats and curiosity about the method used. It's a classic low-key flex post typical of the forum's security/hacking subculture — casual, joking tone, locked afterward as a closed record.

Okay another one I took by tha ballz today :D— NIX

You didn't "shoutz" to me :(— ap3x

Get me the code of the page NIX. What method did you use btw?— Kimmi

Prj Raptor RAT/Trojan Share

A member drops a 'RAT/trojan' download in Server & Computer Security, disclaimer emoji included

A short thread in the Server & Computer Security subforum where member h3lplessalpaca shares a download link and basic usage notes for 'Prj Raptor,' a remote access tool flagged by antivirus software as a hacking tool. The post walks through why AV software detects it and touches on the client/server relationship of such tools, capped off with an 'education purposes only' wink. It got a single one-line thank-you reply from longtime member marz before fading into archive obscurity.

Prj Raptor is possibly the easiest to use rat/trojan i have ever seen— h3lplessalpaca

EDUCATION PURPOSES ONLY? :D— h3lplessalpaca

thanks for this— marz

SQL Injection Scanner Tool Drop

A skiddie-tier SQLi scanner share that pulled twenty 'thx bro' replies and one blunt reality check.

In this Server & Computer Security thread from late September/October 2009, longtime member f0wh posted a download for an SQL injection scanner tool behind hidden content (unlock-by-reply). The thread quickly filled with the classic forum ritual of members posting 'thanks'/'unhide' just to unlock the download, spanning regulars, VIPs, and a couple of later-banned accounts. Amid the pile of low-effort thank-yous, a couple of more security-savvy members pushed back, calling the tool basic and skiddie-oriented rather than anything sophisticated.

Thanks, but so skiddie.— XpliciteR

thanks for the post but suffers from standard scanner issues— rawrsec

[Req] Test dummie/bot for a exe, will remove instantly.

One VIP, one mystery .exe, and a request nobody wanted to touch too closely.

A short, single-post request in the Server & Computer Security subforum where user S3RK, a VIP member since mid-2007, asked if anyone could run an .exe file on a spare machine or bot to check whether it was being flagged, believing it to be 'FUD' (undetected by antivirus). The thread got no visible replies, capturing a very typical low-key moment of the forum's security/black-hat corner rather than any major saga.

I need someone to run a .exe on a bot or something so I can see whether it's working or not. I believe it's FUD.— S3RK

8 Antivirus for USB Flash Drives

A portable antivirus toolkit for your USB stick — 2010's answer to walking into any infected computer prepared.

A quick resource-sharing post by longtime poster m1sterfopje in the Server & Computer Security section, bundling eight portable antivirus/scanner tools (Ad-Aware, Avira, Avast, McAfee, NOD32, ClamWin, Trend Micro, Dr.Web) into one no-install USB toolkit. Typical of the era's utility-sharing threads, it was gated behind a 'reply to see hidden content' wall, a common trick to farm replies and post counts. Got a one-line thank-you reply and little else — a small, functional piece of the forum's tech/security corner rather than a dramatic one.

Thanks Bro— PurePwnage99

10 Security Enhancements: a WEP-and-ZoneAlarm-era PC security checklist

An old-school PC security checklist from the days of ZoneAlarm, WEP, and Outlook Express.

VIP member m1sterfopje posted a basic ten-point PC security guide covering Windows/Office updates, firewalls, spyware blockers, strong passwords, antivirus software, wireless security (WEP/MAC filtering), and general skepticism about email and phishing. It's a fairly generic, dated 'best practices' list typical of early Windows XP-era security advice rather than anything scene-specific. The thread sits in the Server & Computer Security subforum under Tech & Security, with no replies recorded, alongside a site-wide banner promoting public giveaways of steam accounts and rapidshare loot.

Be skeptical of things on the Internet. Don't assume that e-mail 'From:' a particular person is actually from that person until you have further reason to believe it's that person.— m1sterfopje