Sign In
Create Account
This topic is locked
Today I was requested to check above mentioned tool and I sadly found a backdoor, im curious why noone else did this earlier.
Backdoored github repo
https://github.com/fiftythreecorp/LeagueOfLegendsAccountChecker/
Backdoor itself
Spoiler
REQUEST
PAYLOAD
Raw whois domain record
Spoiler
Domain Name: LOL-RIOTGAMES.COM Registry Domain ID: 2351115083_DOMAIN_COM-VRSN Registrar WHOIS Server: whois.reg.com Registrar URL: http://www.reg.ru Updated Date: 2019-02-17T06:35:25Z Creation Date: 2019-01-09T21:55:01Z Registry Expiry Date: 2020-01-09T21:55:01Z Registrar: REGISTRAR OF DOMAIN NAMES REG.RU LLC Registrar IANA ID: 1606 Registrar Abuse Contact Email: abuse@reg.ru Registrar Abuse Contact Phone: +74955801111 Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited Name Server: NS1.RUVDS.COM Name Server: NS2.RUVDS.COM DNSSEC: unsigned URL of the ICANN Whois Inaccuracy Complaint Form: https://www.icann.org/wicf/ >>> Last update of whois database: 2019-05-15T00:14:15Z <<< For more information on Whois status codes, please visit https://icann.org/epp NOTICE: The expiration date displayed in this record is the date the registrar's sponsorship of the domain name registration in the registry is currently set to expire. This date does not necessarily reflect the expiration date of the domain name registrant's agreement with the sponsoring registrar. Users may consult the sponsoring registrar's Whois database to view the registrar's reported date of expiration for this registration. TERMS OF USE: You are not authorized to access or query our Whois database through the use of electronic processes that are high-volume and automated except as reasonably necessary to register domain names or modify existing registrations; the Data in VeriSign Global Registry Services' ("VeriSign") Whois database is provided by VeriSign for information purposes only, and to assist persons in obtaining information about or related to a domain name registration record. VeriSign does not guarantee its accuracy. By submitting a Whois query, you agree to abide by the following terms of use: You agree that you may use this Data only for lawful purposes and that under no circumstances will you use this Data to: (1) allow, enable, or otherwise support the transmission of mass unsolicited, commercial advertising or solicitations via e-mail, telephone, or facsimile; or (2) enable high volume, automated, electronic processes that apply to VeriSign (or its computer systems). The compilation, repackaging, dissemination or other use of this Data is expressly prohibited without the prior written consent of VeriSign. You agree not to use electronic processes that are automated and high-volume to access or query the Whois database except as reasonably necessary to register domain names or modify existing registrations. VeriSign reserves the right to restrict your access to the Whois database in its sole discretion to ensure operational stability. VeriSign may restrict or terminate your access to the Whois database for failure to abide by these terms of use. VeriSign reserves the right to modify these terms at any time. The Registry database contains ONLY .COM, .NET, .EDU domains and Registrars. ===ADDITIONAL_WHOIS_DATA_FOUND=== Domain name: LOL-RIOTGAMES.COM Domain idn name: LOL-RIOTGAMES.COM Status: clientTransferProhibited http://www.icann.org/epp#clientTransferProhibited Registry Domain ID: Registrar WHOIS Server: whois.reg.com Registrar URL: https://www.reg.com/ Registrar URL: https://www.reg.ru/ Registrar URL: https://www.reg.ua/ Updated Date: 2019-01-10 Creation Date: 2019-01-10T00:55:05Z Registrar Registration Expiration Date: 2020-01-10 Registrar: Registrar of domain names REG.RU LLC Registrar IANA ID: 1606 Registrar Abuse Contact Email: abuse@reg.ru Registrar Abuse Contact Phone: +7.4955801111 Registry Registrant ID: Registrant ID: Registrant Name: Protection of Private Person Registrant Street: PO box 87, REG.RU Protection Service Registrant City: Moscow Registrant State/Province: Registrant Postal Code: 123007 Registrant Country: RU Registrant Phone: +7.4955801111 Registrant Phone Ext: Registrant Fax: +7.4955801111 Registrant Fax Ext: Registrant Email: LOL-RIOTGAMES.COM@regprivate.ru Admin ID: Admin Name: Protection of Private Person Admin Street: PO box 87, REG.RU Protection Service Admin City: Moscow Admin State/Province: Admin Postal Code: 123007 Admin Country: RU Admin Phone: +7.4955801111 Admin Phone Ext: Admin Fax: +7.4955801111 Admin Fax Ext: Admin Email: LOL-RIOTGAMES.COM@regprivate.ru Tech ID: Tech Name: Protection of Private Person Tech Street: PO box 87, REG.RU Protection Service Tech City: Moscow Tech State/Province: Tech Postal Code: 123007 Tech Country: RU Tech Phone: +7.4955801111 Tech Phone Ext: Tech Fax: +7.4955801111 Tech Fax Ext: Tech Email: LOL-RIOTGAMES.COM@regprivate.ru Name Server: ns1.ruvds.com Name Server: ns2.ruvds.com DNSSEC: Unsigned URL of the ICANN WHOIS Data Problem Reporting System: http://wdprs.internic.net/ >>> Last update of WHOIS database: 2019.05.15T03:10:02Z <<< For more information on Whois status codes, please visit https://www.icann.org/resources/pages/epp-status-codes-2014-06-16-en. % By submitting a query to REG.RU Whois Service % you agree to abide by the following terms of use: % https://www.reg.ru/whois/servpol (in Russian) % https://www.reg.com/whois/servpol (in English)
Cleaned & Updated headers to match current RiotClient version (18.2.0)
Hidden Content
You'll be able to see the hidden content once you reply to this topic or upgrade your account.
You'll be able to see the hidden content once you reply to this topic or upgrade your account.
Everyone whos been using this tool before should immedialy change password on their accounts.
