Villavu Hacked LOL

villavu got hacked, same people who hacked tribot i believe, anyways

GOOD GAME

 

what was villavu ?

 

its the website for Simba, a botting program thing

 

Simba forum's and srl botting.

 

Quite wrong. Read the home page, this was not a "hack", Villavu has never been "hacked".

And why is this funny to you?

 

Not really a big deal, only forum account passwords were compromised (and possibly private messages) nothing else.

Someone got access to an admin's email address, emailed another admin for a password reset on his account, and then got access to the account.

It was figured out and sorted out quickly, and villavu will be back within a few days.

All Runescape accounts are 100% safe and unharmed, and the bot itself has never experienced any downtime.

Read official statement here:
http://villavu.com/index.html

 

Where can i find a list of scripts i can use for simba? Cause i would look on the forums for them but since it's down now i don't know what to do? Also i'm using RSBot right now is it safe?

 

You'll just have to wait for the forums to be up again.
Umm, link to the site where you got/are using RSBot?
If you mean PowerBot then yes you're fine.

 

yes powerbot, But i meant like is it safe for not getting banned, I'm using the following scripts: FreeFighter, Addictive Firemaker & k0na's Money Maker
Is powerbot even a good bot to stay safe from being banned?

 

OP got a little too happy and nearly jizzed himself

 

Don't really see the point in messing around with a community such as SRL, its mean and can not be justified, gota be a cruel person to do that.

Anyway, not a hack just someone managed to gain access by chance to an admin account. Am not too worried since the password i use is unique for that website and sythe only .

Thankfully Wizzup? is taking care of business, so website will be back up in a few days. No data loss, all good!!!!!!!!!!!!!.

 

how are all these sites getting hacked ?

 

none of these sites have intelligent security. They are probably using low bit encryption/hashing.

I'm pretty sure Villavu was NOT hashing your passwords. So if you use the same password on anything else, like paypal or social media, change it now.

Ideally there would be a salt & pepper to hash the passwords, that way if the database was compromised passwords would be safe because the server side pepper would still be secure.

Who knows what their web developers set up for them. They're not releasing any specific details.

 

Read yohojo's post. It isn't a website design security flaw on villavu's end, it is an issue with email accounts being hacked too easily, which is an issue that affects RS account security as well.

 

Hi,

sadly you are quite miss informed.

the hash was md5(md5(pass) + salt)

e:
Wizzup asked me to post the following:

The password weren't stored as plaintext in the database. We do not try to hide any information we got from you. Information can be found on villavu.com, on the mainpage(only one for now). If you got any questions feel free to join our IRC channel(rizon #srl) or contact wizzup directly. His e-mail can be found at wizzup.org

 

Not all runescape accounts are safe. If people used the same password on the website and the same on their account, there account is going to be hacked.

 

They got cracked.

 

You're the one who made the fight caves script right?

 

Do these bots work for 07 or only EOC?

 

Yess will be back up, sweet!