Lost Password - Need Hack

I basicilly joined this forum to recieve some help from people that may be firmilliar with Hacking Servers and retreiving old passwords.

Here is my issue.

My Aunt owns a business and had her website hosted on a non-traditional server located in someones home. This wasn't a problem up until about a month ago when this person started Editing the Content on the site to benifit them for fraudlent use.

Basically these 2 guys have stolen more then $20,000 from customers that are part of this business.

Here is what I need... (NOTHING ILLEGAL)... I need a ftp Server hacked, I will need all Pages Erased and the .htaccess to redirect to another website. -- This isn't illegal because WE OWN this website. When you email me I can provide the information of the owner so you can verify the Who Is yourself --

I wouldn't be asking except for I cannot figure out for the life of me the login and passwords to this server. I think it is a windows server, since it is hosting a .asp application , but it could be linux. I'm not sure how to tell.

I have been running websites for some time now and I have never heard of such a thing happening until now.

I am not posting the Website address intentionally because I don't want multiple people hacking the pages.

edited by admin: no contact info permitted on the forum, please. Use the private message system for private information.

We would not be able to provide you that information. We have no evidence that you actually are the owner of the site. You may well be, and what you're asking may not be illegal, but before we could be party to it we would need proof that the above premises are true.

If you are the owner of the site and the domain name, then legal channels are the best bet here. Erasing the data from the server will probably yield nothing. It's likely they have backups of the information.

In addition to what Joe said -

Quote:

---

This isn't illegal because WE OWN this website.

---

I wouldn't be so sure about that. If you barge into a hotel room guns drawn to "take back" your "stolen" sports memorabilia, you still end up in jail :D

Quote:

---

Originally Posted by JPnyc

We would not be able to provide you that information. We have no evidence that you actually are the owner of the site.

If you are the owner of the site and the domain name, then legal channels are the best bet here. Erasing the data from the server will probably yield nothing. It's likely they have backups of the information.

---

I'm not sure if these People are really that smart to make backups but you are right. As for providing prof that we own the website that isn't a problem. If needed my Aunt will provide you with her Identification, and you can look up the Who Is...

If no one here is willing to help me.

How might I retrieve my own passwords? Has anyone ever used TSGrind? Or TSCRACK? if So, point me in the right direction on how to use these and I will do it myself.

As of right now we have some disputes out with the World Intellectual Property Organization. I'm not quite sure how long this will take but in the meantime I would like to stop this madness.

Quote:

---

Originally Posted by Negative

I wouldn't be so sure about that. If you barge into a hotel room guns drawn to "take back" your "stolen" sports memorabilia, you still end up in jail :D

---

:rofl:
:rofl:

Negative brings up a good point. It actually doesn't matter if you own the site or not, the fact is you still don't own the server you would be hacking into, and still would be culpable for the crime of hacking. What is the country involved here? Where is the server located? As I said earlier, legal channels are your best bet here. If they are using a domain name that you own, you can prosecute. I would even contact the FBI about it, assuming this is all taking place in the USA.

Quote:

---

Originally Posted by JPnyc

Negative brings up a good point. It actually doesn't matter if you own the site or not, the fact is you still don't own the server you would be hacking into, and still would be culpable for the crime of hacking. What is the country involved here? Where is the server located? As I said earlier, legal channels are your best bet here. If they are using a domain name that you own, you can prosecute. I would even contact the FBI about it, assuming this is all taking place in the USA.

---

Actually we have attempted the police but there is actually nothing we can do. Police said although they have taken your money and cashed those business checks this is nothing illegal. They said that because the Name isn't trademarked any person could legally cash those checks, and the bank that cashed them doesn't even have to verify ownership.

As for someone else who isn't authorized using this Server, I'm not sure of the Legal Ramifications that they may be under, but if it is anything like what the Police can do, its... absolutely NOTHING.

And as for the passwork Hack I'm not asking for the entire Server just the FTP site for password Retrieval. I will set up the redirects. - if the guy isn't too smart he probably isn't firmilliar with .htaccess files or webconfig. but he could be, so it might all be just a waste anyway.

The police may not be able to help but this is fraud. The FTC and the FBI would be the places to try. They're not only defrauding you, but from what you've said, customers to the site as well. That's crime, so while the local police might be powerless, other gov. agencies will not be.

I would like to add....If you own the domain name...then have the dns record changed to your legit site...Put up a temporary "under construction" until you get a new site created...and you may also want to have a warning about the other site and its fraudulent activities.

MLF

Quote:

---

Originally Posted by morganlefay

I would like to add....If you own the domain name...then have the dns record changed to your legit site...Put up a temporary "under construction"...

---

This would be something I would do if I could get into the Ftp. Unfortunatly the login and password have been changed.

I agree with morgan. If it is your site/domain then it is easy to change Domain records to point to new name servers and a new host. You won't be doing anything even remotely questionable or illegal.

Stuart

I was working on this post while your previous reply was being posted.

Why would you need FTP to change name server and DNS records?
All you have to do is change the name servers records with whoever your domain registrar is. Or you can change host records with whoever is hosting your DNS records.

Stuart

You just need to go to a new host, prove you own the domain, and have the site setup.

I have tried this. Since the original domain was registered at GoDaddy I contacted them and basicly they they said

"Unfortunately, we have no authority of the legal issues between you and the current registrant of the domain name. Per the UDRP, registrars are prohibited from making changes to a domain name without direction from a court or arbitration forum. If you are unable to come to a satisfactory agreement with the current registrant, you may wish to go through a court or arbitration forum (such as WIPO, The World Intellectual Property Organization

When we receive notice of a pending legal dispute we will lock the domain name so that it cannot be transferred or otherwise modified.

Likewise, when we receive a decision, we will update the domain name accordingly"

This is why I need this FTP hack, so that I don't have to wait on Courts. If the site is mine, it is totally legal for me to edit it. I'm not stealing or editing the server in any way.

you dont need the ftp password to change your dns records....

you just need the ftp password to make changes to the site or take it down

If you change your DNS record to point to another server...then in 24 hours or so...your customers will no longer be directed to thier server but your new server host.

Who did you register the domain with...contact them. .... you will also have to arrange to host your site at another hosting site\server...and if you cannot access your site...you may have to design a new one from scratch.

Thats why backups are very important... ;)

MLF

Is anyone else pissing themselves laughing? If I park my car in someone's garage and they change the plates on it to theirs and I break in and steal it back, me saying "But it's mine!" doesn't make an agent flinch even for a SECOND when they point out that you still broke in to get it back instead of calling them.

Looks like you dont own the domain....which is something I have seen happen too many times to a small business...

They contact an ISP...or webhosting company and the webhosting company registers the domain, creates the website and really is the owner. This way if you do not pay them or there is some type of dispute...they can pretty well do whatever the fruck they want...cause they own the domain....

Usually when you register a domain you get an email confirming payment, length of registation and username\password for the domain....

if you dont have that....then you have to prove you are the rightful owner ...via your credit card log.

as stated...hacking someone elses domai\server is against the law.

MLF

The problem is that noone can Change the DNS entry without authorization from the Host. And the Host is a FRAUD.

I was under the impression that I explained this when GoDaddy quoted that I needed to go to WIPO to get it changed.

If I am missing something here ... please expain how to change the DNS without getting authorization from the current Host.

Quote:

---

Originally Posted by morganlefay

Looks like you dont own the domain....which is something I have seen happen too many times to a small business...

---

Yes we own the Domain, it has been bought and paid for, If i'm not mistaken the server is even under my Aunts Name. So what about that? This is what I'm trying to Clear up.

If you own the domain...you dont need the fricken hosts permission unless the host owns the domain...just get another host.

Who did you pay........... the host for the domain..or GoDaddy??

MLF

Explain how to change the DNS then? The WebSite Name was paid for my my Aunt. Then is was moved to a Remote Server. This server is hosted in a Home or Business or something in The USA. I believe the Server was registered under My Aunts Name also.

If i'm not mistaken this cannot be done without getting authorizaiton from either the host or going through the WIPO and waiting on a Court Decision.

She Paid GoDaddy for the Domain Name and Registration only. At that time there was NO host.

Why would this server be hosted from a house? If this website can produce twenty grand in revenue, we can figure this website receives a great amount of traffic. No? Fishy? Yes.

FTP and DNS are totally different. Is he playing stupid or is it just me? Does it seem like the focus redirects back to hacking FTP?

For example after being told to change the address via DNS... We get...."This would be something I would do if I could get into the Ftp. Unfortunatly the login and password have been changed."

Excuse me for being blunt and straight forward. Please, remove yourself from this website.

www.IHack4FreeHehe.com go for that.

So...if she paid GoDaddy...then wheres the confirmation\reciept for the payment.

That will prove ownership.

BTW...we recently had a dispute with our hosting company...and I removed our domain and had it resetup\directed in 24 hours at another host....without the original host even knowing about it...I then sent them the "we no longer require your services letter".

I didnt need thier permission.

MLF

So Godaddy has records of who owns the domain. Can she get into her go daddy account? If I were you I would tell her to call their tech support right away, set up hosting with them and have the DNS point to her domain. They would probably be able to answer any other questions, and their hosting plans are reasonably cheap

Quote:

---

Originally Posted by d00dz Attackin

Why would this server be hosted from a house? If this website can produce twenty grand in revenue, we can figure this website receives a great amount of traffic. No? Fishy? Yes.

FTP and DNS are totally different. Is he playing stupid or is it just me? Does it seem like the focus redirects back to hacking FTP?

For example after being told to change the address via DNS... We get...."This would be something I would do if I could get into the Ftp. Unfortunatly the login and password have been changed."

Excuse me for being blunt and straight forward. Please, remove yourself from this website.

www.IHack4FreeHehe.com go for that.

---

Being Rude is not the kind of people we need here! (Asking Questions and Sparking Response is!)

I have already stated my problem... if you were firmilliar with how the forum works then you would be able to clearly see why the posts are out of order. If i click reply and spend 4 minutes typing a response and in the meantime someone else sets a posts I won't see it until I have already submitted.

Next thing... I know there is a difference between DNS and FTP... but since I already know that I cant change the DNS without know how or getting approval (This is what GoDaddy Said). I just wanted to take the Next step and Open the FTP server and make a REDIRECT. Removing the Site Pages may buy some time before the FRAUD finds out and attempts to change it back.

As for the Website Producing Revenue... its not just the Website, Its an actually business. The website is just part of the Scam. This guy is posting ads in Newspapers with his Telephone number and this Website for them to Contact. He will go to your Business and Pick up the Check then Cash it in his Personal account. All the while there is nothing We can do, Except try the FEDS (Thank you for that bit of insight by the way).

The reason a Business without a Trademark cannot press charges is because there could be more businesses with the same name.

The people who have to press charges are the Business who gave these checks to the Fraud-Salesmen. Meaning that the Business is getting a bad rep while Mr Fraud Skates off with over $20,000. When this happens both parties are Hurt. They won't recieve the merchendise they paid the salesmens Silver Pockets with and the Business is lost.

In the beginning the customer was spost to Fed-Ex this check, but at his own discression... after being told not to he gave it to the Salesmen who then Decided he was going to keep it.

Quote:

---

Originally Posted by JPnyc

So Godaddy has records of who owns the domain. Can she get into her go daddy account? If I were you I would tell her to call their tech support right away, set up hosting with them and have the DNS point to her domain. They would probably be able to answer any other questions, and their hosting plans are reasonably cheap

---

Yes you are right, GoDaddy has Records of the Domain, but GoDaddy is the one that Specificly stated that we needed rights to move it from its current host and that needed to be recieved from either the Host itself or the Court System at WIPO.

Godaddy needs permission from the owner...not the host.

phone them again.

Have the receipt in hand .....your proof of payment and ownership.

MLF

Who said I wasn't asking a question(s)? I sparked your response, didn't I?

If I was rude, please excuse my behavior and straight forwardness. Give it like it is, I believe.

Honestly "Mjsmikey" we get tons of people who calm they can trick us into hacking a server, email, IM accounts and the like. Frankly, we do not hack, regardless if it is for security reasons or not. It is illegal (unless it is a "dumbie server"), just as everyone has implied with examples. So get the hacking aspect out of your mind.

Quote:

---

If i click reply and spend 4 minutes typing a response and in the meantime someone else sets a posts I won't see it until I have already submitted.

---

Since you like the FAQ so much, read on up on how to edit or delete a post.

The bottom line is, we're trying to help by our suggestions, but no way, no how will we help anyone hack into anything.

Quote:

---

Originally Posted by JPnyc

The bottom line is, we're trying to help by our suggestions, but no way, no how will we help anyone hack into anything.

---

I guess I shouldn't use the word HACK... I am more looking for Password Retrieval. on a Site that I own.

But, since this isn't what people on this forum help with... It would be nice to figure out what others have delt with when it comes to domain names being moved from host to host.

Someone please explain why Go Daddy Tech department would respond the way they did if ... changing the DNS was possible, wouldn't they have just told me that in the first place?

I have asked the same question over and over and over..

Do you have the receipt or proof of payment...hence ownership????


You havent answer that...If you do...you tell GoDaddy that you are the owner and you want to change the DNS records for YOUR domain.

If you want to MOVE the website...then you need ftp access\hosting permission.

You appear to be confused about the difference between domains, dns, hosting and ftp.

If you do not have a copy of your website handy...you will have to redesign from scratch.

MLF

Quote:

---

Originally Posted by morganlefay

Do you have the receipt or proof of payment...hence ownership????

---

I honestly don't think my Aunt Still has this Email, but.. Since GoDaddy is the Original Registration and they Acknolegded that they originally aquired the domain, they would have no problem verifing the information with my Aunt whom has called them on several Occations, and they have verified the domain registration with her. I'm sure we could have that email resent if that is what we need...but so far they just verify over the phone.

As for moving the Website... Doesn't need to happen... Building a new site is more benificial anyway.

Quote:

---

Originally Posted by morganlefay

You appear to be confused about the difference between domains, dns, hosting and ftp.

---

Here this is coming up again... I thought I explained this Already. Should I give you the Definitions? I understand what everything does and Means.

I'm just trying to minimize the Risk of losing more customers to potential Fraud. SomeOne at GoDaddy may very well not know what they are talking about, but what they told me was... In transfering Domain names from one host to another, they first have to send a request to the original host for a DNS change. Untill the Host responds and agreed they cannot and will not Change the DNS. -- I'm guessing this might protect people who purchased the name from someone else. / domain names are hot sellers on EBAY. --

I hope this clears up everything.

Morgan:

Quote:

---

Next thing... I know there is a difference between DNS and FTP...

---

We cannot forget that he knows this material.

Look kiddo,

DNS (Domain Name System) translates your www.example.com into an IP address. Now if we can figure out that the square goes into the shape of the same sized square, it works! Your www.example.com is forwarded to 1.2.3.4 (the hacked server), simply changing your IP address through DNS, it can go to 2.3.4.5 that states (you can even use www.freewebs.com for the time being), website is down, contact whatever at whatever dot com.

Your DNS will look like NS1.ILikeGirls.com (there will be two of these, reason being is that if one goes down the other one will do the redirecting for the time being). Get in contact with your DNS provider, since it isn't hosted via a company. I highly doubt this house is providing your DNS needs. (Companies provide their own DNS services being that they do not host just one website.)

This thread reminds me of trying to teach pigs how to sing..............

It wastes your time, and frequently annoys the pig :D

Quote:

---

Actually we have attempted the police but there is actually nothing we can do. Police said although they have taken your money and cashed those business checks this is nothing illegal. They said that because the Name isn't trademarked any person could legally cash those checks, and the bank that cashed them doesn't even have to verify ownership.

---

Well, you must live in some kind of banana republic then. Fraudulent conversion and identity theft are crimes in both the EU and North America.

Go to the FBI or their equivalent. You claim that the amount exceeds $5,000?........ they will be interested (one way or another:lildevil:)

Has anybody wondered about the "customers" who are generating this alleged "income". Maybe they are not getting the goods or service that they are paying for? Wouldn't they be concerned................probably not if they felt that they had been ripped off?

Incidentally, what is the nature of this alleged "business"? Like if I go to your website and order an automobile and you deliver it to me; then someone else cashes the cheque............... that is fraud, and most police forces would respond automatically?

No gore, you are not the only one pissing yourself laughing. :D

Why is it that I envisage one shower of toerags ripping off another shower of toerags, and all they can think of is illegal activity as a solution?

The lack of police interest tells me a lot.............. how about you folks?

Go here:

http://www.usdoj.gov/criminal/cybercrime/reporting.htm

Internet fraud and SPAM

• FBI local office
• U.S. Secret Service (Financial Crimes Division)
• Federal Trade Commission (online complaint)
• if securities fraud or investment-related SPAM e-mails, Securities and Exchange Commission (online complaint)
• The Internet Crime Complaint Center

:)

Jeez
just construct a new site, get it up on a new host
start over
do the re-direct for the DNS to your new site

jobs a gud'un :D

although I smell BS
OP just wants to gain illegal access to someone else's server
[your words OP ]
and to reitterate Doodz words

just leave .............

I mean, come on .........
$20 000 at stake
it's a business
and your 'Aunt' doesn't keep the receipt :eek:

Hmmmm,

Just went to the local hotel and spent an hour and a half with a few cronies. We discussed this issue as it was of interest to all parties (being):

1. The Filth
2. Trading Standards
3. 2 lawyers
4. Me

The questions and points raised were:

1. Assuming that you do not have a limited liability corporation, and you do not have the ability to, or have not, registered a trading name, someone else can trade in the same name. It should be noted that it is not "your" name, it is just "a" name.

2. Provided that the means that you use to do so are legal, the interception or soliciting of someone else's business is also not illegal. This is called "competition", and is one of the bases of antitrust.;)

At this point, The Filth observed that taxicab companies and ice-cream vendors didn't really enter into the spirit of competition, unless the spirit was petrol in a bottle with a lighted rag, backed up with a sawn-off gauge.:firedevil

3. From a trading standards viewpoint, the question is whether the customer requested specific goods or services, and if these were supplied to legal requirements, and to the customer's satisfaction. The mere fact that they might have been supplied by someone other than whom the customer thought they were dealing with is irrelevant. So long as the goods or services were genuine and met standards then that is OK.

4. From a legal viewpoint, the person who provides the goods or services must be the one who gets paid for them. Similarly, the person who pays for goods or services must get supplied with them. Anything else is a criminal offence in all countries where law and order still prevail.

5. From an IT viewpoint; you are, or are not, the registered owner of a "domain". These things are not infinite, and need renewing. If you let a domain expire, you can get squatted on, that is a fact of life:( It might also explain why GoDaddy will not co-operate and why internet arbitrators are involved?

I do not know the laws and standards that apply to your specific locality. You will have to check those yourself.

I have studied the posts in this thread very carefully. It seems that this happened "all of a sudden"? well, I have been instrumental in putting enough fraudsters in the "big house" to tell you that they are not creatures of passion and impulse.

As I read it, the domain title lapsed and the guy took it over, thus hi-jacking the business as well. Explains GoDaddy and the arbitration?

You may well be pissed off with your own stupidity, sorry, your aunt's, but that is no excuse to attempt illegal activities to recover the situation from someone who may well be regarded as amoral (by me at least!) but has operated within the law. If you don't like the law: tell your representative, or vote in another?

I just fail to understand why the OP cannot just change the DNS for said owned domain.

If you own the domain...you can transfer to any host you want....unless of course you let the domain name lapse...where the other company then purchased the domain because you did not pay the renewal.

We have a similar issue where we own ourcompany.ca and someone else owns ourcompany.com...we are currently trying to find a legal way to take ourcompany.com down....although this appears to be a long and tedious task involving lawyers. :rolleyes:

But ourcompany.ca is still our domain allowing us to use, transfer update etc as we wish....although we have no legal right to ourcompany.com...and we have not resorted to illegal activities.

As stated...if the company is delivering goods to the consumer ...there is no fraud.

One of my favorite sayings is

"there are no technical solutions to administrative problems"

Hence if you dont have proof of ownership...your SOL

I suggest your aunt start to employ better business practices.

MLF

Quote:

---

Originally Posted by morganlefay

I just fail to understand why the OP cannot just change the DNS for said owned domain...

---

I totally agree. This is what I have been trying to Say all along!!! Hence the Reason for this Discussion.

And yes, I'm sure my Aunt could have made some better decisions, but what is done is done so Now I'm attepting to clean it up.

Thank you forum for your help and insight. I wasn't aware FTC and FEDs handled things like this, I have already informed my aunt of those proper chanels.

Hopefully the WIPO will move quickly so that I can change the DNS, since I obviously cannot find a way to alternatively change the site for temporary use/redirects

Quote:

---

I totally agree. This is what I have been trying to Say all along!!! Hence the Reason for this Discussion.

And yes, I'm sure my Aunt

---

Tell: Say, Reason, Discussion, and Aunt - I said hello.

I thought the reason of this discussion was found in the title? I think I'm going to write a book on Human Anatomy, and name it "One-Hundred Best Blue Chip Stocks of 2007."

Nihil:

Consider being a detective, would you? You make great points and a proper way of analyzing his posts.

*Cheers*

Quote:

---

Originally Posted by d00dz Attackin

I thought the reason of this discussion was found in the title? I think I'm going to write a book on Human Anatomy, and name it "One-Hundred Best Blue Chip Stocks of 2007."

---

Sometimes, Things are better left unsaid...