Flashchat exploits, hacks, tools & more

Post by **KEN** » Sat Jul 24, 2010 9:07 am

u r using wrong packet......if its 4.x.x version then the above packets should work fine.....if r beginner to tamper data then try this:

lets take the name of the user u want ban b "ken"

so this is wat u need to do:
on main chat type /ignore ken (note that i said just type, dont press enter yet)
then open tamper data and click "start tampering"
immediately press enter.Tamper data should open up asking u for few options needed or wat u want to do.....UNCHECK "continue tampering" and click "tamper" in the new window that opens look at the right hand side and it should say this:

Code: Select all

sendAndLoad=%5Btype%20Function%5D&t=&r=0&u=XXXX&b=12321&c=ignu&cid=1&id=XXXXX

the XXXX in the above packet r the things that u DONOT need to change
now u need to change this to

Code: Select all

sendAndLoad=%5Btype%20Function%5D&s=7&t=&r=0&u=XXXX&b=3&c=banu&cid=1&id=XXXXX

now note these things: s=7 is added and DONOT change the value of u=xxxx(use that value which is there already,not the 5581 but the number which u get while ignoring) put r=0, b=3, c=banu and also DONOT change the value of id=XXXX

i think i cant explain it better than this.....if u still cant get it woking then read this too : http://sethioz.com/mediawiki/index.php5 ... #Tutorials

Post by **Sethioz** » Sat Jul 24, 2010 9:42 am

Ken pretty much explained it. if you log out, you used wrong packet.
again, do not use tamper data, its too messy, it gets wrong packets and makes chaos, use webscarab instead
or better yet, use paros proxy as i have explained. with paros proxy you can make permanent filter by adding s=7, it is explained in my Knowledge Database

guid70 · Post by **guid70** » Thu Oct 14, 2010 7:49 pm

Hey guys. I have a question. How to become a moderator? I want to get an admin icon so i can ban, gag and boot ppl. I'm using extreme flashchat 4.7.8. Any suggestions or help is greatly appreciated. I also have the same problem as what Jawwad said. Thanks.

Post by **Sethioz** » Thu Oct 14, 2010 9:43 pm

guid you need to read thru the thread, everything is explained.
also how comes ppl cant see the knowledge database article of flashchat hacks ? it has been explaine IN DETAIL there. so start reading

ThEMaDMaN · Post by **ThEMaDMaN** » Fri Nov 12, 2010 4:38 pm

hi thanks for replying in my thread and wow it was fast okz u closed it and refered me to this thread yeah i read this forum and i cant understand it at all and i tried it also Extreme FlashChat-X.application and its not working or may be i am not doing it right okz so i wana use that on 123 flash chat client so can u give me step by step details or smthing like that and what tools i need ? i reallllyy wana do those stuff on sm site ill be waiting

Post by **Sethioz** » Fri Nov 12, 2010 5:52 pm

site link would be useful, but this IS the detailed tutorial.
if you have read thru this thread and my wiki article (link's in first post on first page), you will find all the info and tools. wiki article lists details already.

ThEMaDMaN · Post by **ThEMaDMaN** » Fri Nov 12, 2010 6:40 pm

hi thanks for a quick reply again site name is www.stormchat.tk and i wana hack into it or use admin or host powers and ill read it again with full atention still 123 chat looks alooot diffrent then the flash chats okz ill read and see what i can find out more .

Post by **Sethioz** » Fri Nov 12, 2010 7:07 pm

my bad, 123 flashchat is not same as this one.
check here > http://sethioz.com/forum/viewtopic.php?f=47&t=464
continue discussion in there if you wish.

however you should still read everything about this thread, because those skills will come in handy.

Australyan · Post by **Australyan** » Sat Jan 15, 2011 1:11 am

Hello to everybody guys!
I'm new, but I've been reading you for 1 year and thanks to you, I can hack very well the flashchat :) I forgot, I' m italian!

Anyway, I would like to know if there are any new versions about extreme flashchat, older than 2.0 that I found in this 3d some pages ago! I didn't find any news from Dark Lord and his excellent works!

And if it's possible I'd like to ask some info about invisble login, that looks not working...

That's all for now!

Bye guys!

Post by **Sethioz** » Sat Jan 15, 2011 1:19 am

its invisible name, not login. what version of chatroom you are using ? if im correct, they patched it in newer version, but i have never tested.

as about dark lord, i cant help you there. he seem to be busy with some stuff, i barely see him lately.

Australyan · Post by **Australyan** » Sat Jan 15, 2011 1:35 am

Sethioz wrote:its invisible name, not login. what version of chatroom you are using ? if im correct, they patched it in newer version, but i have never tested.

as about dark lord, i cant help you there. he seem to be busy with some stuff, i barely see him lately.

Ok thx!

I suppose the version about this chat is the 3.8 but I'm not really sure. Is there a particular method how I can get it? I simply read the help page (help.php)....

Australyan · Post by **Australyan** » Sat Jan 15, 2011 1:37 am

I found it!

The version is 4.5.2!

Post by **Sethioz** » Sat Jan 15, 2011 1:39 am

im not sure about this version, i tought that in 5.x somethign it was patched. have you read the knowledge database article of flashchat hacking ? if not, do so. it includes everything mentioned here in detail. so no searching between posts.
link to that article is in my first post in this thread (1st page, first post). or simply look for "flashchat exploits" on my knowledge database

Australyan · Post by **Australyan** » Sat Jan 15, 2011 1:43 am

Sethioz wrote:im not sure about this version, i tought that in 5.x somethign it was patched. have you read the knowledge database article of flashchat hacking ? if not, do so. it includes everything mentioned here in detail. so no searching between posts.
link to that article is in my first post in this thread (1st page, first post). or simply look for "flashchat exploits" on my knowledge database

Ok thx! I will!

inuyasha_demon · Post by **inuyasha_demon** » Fri Jan 28, 2011 3:44 pm

The following sites I found need some good hacking attention.
http://comeroleplay.com/
and
http://roleplaychat.org/ -- but this site seems to be set up a little different and it doesn't display the flash chat version.

Would there be anyway to use these against the http://roleplaychat.org/ site? It's set up alot different then the other one, and I think that this site is integrated with Joomla, or e107, not sure.

Post by **Sethioz** » Fri Jan 28, 2011 8:00 pm

both seem to be tufat flashchat indeed, so you can hack them, using these tutorials listed here.

inuyasha_demon · Post by **inuyasha_demon** » Fri Jan 28, 2011 11:53 pm

Sethioz wrote:both seem to be tufat flashchat indeed, so you can hack them, using these tutorials listed here.

the other good thing is that one of those sites listed above aren't moderated in anyway, the admin for the roleplaychat.org one doesn't come on rarely. the comeroleplay one has two admins, but has invisible staff as mods, so it'd be hard to know who is mod and all.

I noticed on the roleplaychat.org site in their flash chat the ::admin:: and ::mod:: icon cannot be used while typing in chat.

I believe they are both using Tufat Flash Chat v4.x.x.x -- I remember theres a way to check, but don't remember

I've found another chatroom, but it seems to be custom made, and it isn't related to the topic here, so I'll make a new thread.

Post by **dark_lord_tnt** » Sat Aug 27, 2011 1:50 am

hey guys, yeah been busy with loads of stuff. Any way I'll look into those 2 rooms posted above as well as the new versions of tufat. Sethioz sorry about the past few months or years lol but as u know i was in a mess any way my former email was LOST so i'll send u new contact info..

Australyan · Post by **Australyan** » Wed Aug 31, 2011 8:48 am

Hello,
Nobody Knows where can I download the flashchat script? I wanna try to capture some strings...

Bye and thx!

Post by **Sethioz** » Wed Aug 31, 2011 4:58 pm

what is "flashchat script" ? i have never heard of anything like that and capturing strings ? what on earth are you talking about ? have you even read this topic or you just randomly post shit ?

loki · Post by **loki** » Tue Oct 25, 2011 4:57 pm

Hello sethioz and all.I am new in here i find this forum very usefull i ve learned plenty of things.I have also some questions about the topic of ban , i ve seen some posts that explain how to ban a user , i think i got the point but i have a problem with the tamper data. By the time i press start tamper and then the common window appears i manage to push the button of ignore and after this the window of tamper request freezes and i am forced to close it with the task manager.I know this sounds silly but i can't do anything further.any suggestions ?

Post by **Sethioz** » Tue Oct 25, 2011 6:18 pm

use webscarab then. details on how to use those tools are on my wiki

Post by **KEN** » Tue Oct 25, 2011 8:11 pm

I've experienced that tamper data freeze on flashchat 6.x version..yes use webscarab if tamper data doesn't work..
also make sure you have OLD version of firefox..At the most,dont go beyond version 3.5 of firefox.

loki · Post by **loki** » Wed Oct 26, 2011 9:18 pm

i ve checked the wiki about the webscarab and i download it from there however i didn t understand how to use it for freezing tamper data.please can you be more specific about this?and is this freeze common problem and just ordinary that can be overpass?

Post by **Sethioz** » Wed Oct 26, 2011 10:07 pm

i didn t understand how to use it for freezing tamper data

are you completely lost your brains ? webscarab does not freeze anything, its a tool to fucking intercept data .. duh
if you don't understand simple things .. like what webscarab is, i don't think anyone can help you but yourself.

loki · Post by **loki** » Wed Oct 26, 2011 10:18 pm

you misunderstand me.what i say is i didnt understand how i will front the freeze in tamper data with the webscarab.This is the detail i miss that s why i asked you.

Post by **Sethioz** » Wed Oct 26, 2011 10:30 pm

you don't. webscarab is not meant to freeze or unfreeze programs

loki · Post by **loki** » Wed Oct 26, 2011 10:41 pm

From the beggining again,i follow the procedure you mention about ban i do the steps as you say BUT in the part that i press start tamper and then i ignore the user the window that appers freezes and i can t do anything.Then you suggested me to use the webscarab.I downloaded but i dont know how can it help me in this case.I hope i am clear now.

Post by **Sethioz** » Wed Oct 26, 2011 11:51 pm

yes i told you to use webscarab and NOT tamper data. you're using tamper data and asking how webscarab helps ? as i said, you DO NOT use tamper data, and you DO USE webscarab.

loki · Post by **loki** » Thu Oct 27, 2011 12:05 am

I understand you now thanks.Is there any way that i can fix the tamper data it is more easy for me?

Post by **KEN** » Thu Oct 27, 2011 8:06 am

tamper data is more easy for me too..as i said earlier use old version of firefox.which one you using?
Better to uninstall and clear everything from your browser and get tamper data again..if this doesn't solve your freezing then i dont know what will x_x

loki · Post by **loki** » Thu Oct 27, 2011 12:59 pm

haha KEN u ROCK!!! It finally worked ;bp!!Thanks all now i don't have to use this webscarab.Also another thing i admit is that the whois packet doesn't work for all user.For example users with edited names and sympols like these ® ۞ and etc cannot find their ip.Is really this packet useless against these users?Thanks indeed :D

Post by **KEN** » Thu Oct 27, 2011 1:04 pm

pm me the link to the flashchat you're using,we'll check it together.I want to test some more things.

loki · Post by **loki** » Sat Nov 05, 2011 9:42 pm

hello again.i have a problem and i love to know if there s any solution.there is a user in the flashchat that enters from the room 2 which is invisible in the list.this user causes problems such as laggin other users with multiple ignores and invites.is there any way i can ban this user or prevent him from doing this?Note once i enter also from the room 2 and another user who is pro managed to ignore and un ignore me thing i thought was impossible because i was not in the list.Is there any explanation about this also?Thanks

Post by **Sethioz** » Sat Nov 05, 2011 10:54 pm

no idea, i do not develop patches for these exploits + i have abondoned this project years ago.

loki · Post by **loki** » Sun Nov 06, 2011 4:05 am

FoR sure there is a way i can ignore him so i can take his id.I ENSIST because a user did exactly the same thing when i was in the room 2 and invisible in chat he managed to ignore me as i told before.I post it as a non-answered question.

Post by **Sethioz** » Sun Nov 06, 2011 5:18 am

as i said, i don't deal with it anymore. i don't even remember how it worked.
if "ignore" is a command, you can easily use memory editor or packet editor to type in "invisible" names or see them via packet editor. being invisible in chatroom is only html code, it still shows up when looking the code (packet).
you just have to wait and see if there's anyone else who might reply to this and check into it.

Post by **KEN** » Sun Nov 06, 2011 5:31 am

dude that's simple crashing.He is using a 'no name' which appears very small on the list so hard to crash..Simple first ignore him once and then send him tons of invites.

loki · Post by **loki** » Sun Nov 06, 2011 9:47 am

no you didnt understand he used ?username=NAME&room=2 after the flashchat.php so he get in room 2 which is TOTALLY invisible in the list,he can t write in the main wall but he can use pm.That's why he crashes other users easily because they cannot ignore him because he is not in the list.This is the problem i am looking a way to ignore him so i can get his id and ban him!!!!!!!!!!!

Post by **KEN** » Sun Nov 06, 2011 11:36 am

Oh now i see what you mean..he goes into [null]

after he crashes you you get his name?
Like,'name' is ignoring your msg's..or 'name' has invited you.
If you get his name then you can use:

/invite 'name'
and
/ignore 'name'
on main chat window to crash him.
Just tested,it will work.However i knew the name already so you need to find the name he is using.

If you dont get his name.
use:

Code: Select all

sendAndLoad=%5Btype%20Function%5D&s=7&t=%2Fkickout%20%40&r=1&u=0&b=34794&c=msg&cid=1&id=

this is to kickout everyone from the chat..Keep doing it until he is pissed and shows himself.

Post by **Sethioz** » Sun Nov 06, 2011 4:21 pm

as i said before, name is still visible if you get it from packets.
i can't remember it at all, but there was this small page for flashchat that shows users online, it is used to place it on your webpage so it checks who's online.
go to that page and check source of that page. that way, you don't even have to go into chat in order to see who's in there, you get his name, prepare the ignore / kick packet, go into chat and kick him out.

Post by **KEN** » Sun Nov 06, 2011 4:51 pm

That works even better..the thing sethioz is talking about is:

/chat/info.php
put that and it tells you who is in the chat..and invisible names can be seen by 'right click-view page source' on that page.

loki · Post by **loki** » Sun Nov 06, 2011 9:34 pm

Well one by one,this is what i find out:
.KEN is right he goes by the name null so i tried to experiment and i enter also as ordinary user and as null either.i used the command /ignore and /invite and they work.The only problem and i cannot understand why is that when i try to use these commands in big names with space between the words and in names with in front of or sympols like _][*® ™ * ڰ ۞© ❼{ these commands are completely useless and the result is to show a window which says this user didnt found.THIS ALSO happens in the /whois command.Is any solution about this?!?!
.Another this is that i enter this /chat/info.php it is a page that says for example There are 29 users in 1 rooms.There is a box in each one user that says ID but it is empty!!?!?!.Then i went to the page source of that page but is showed only users name again from the 1 room with some in front of the names but still NO null users.How do you explain this?
.Also i tried the kickout command it was really helpfull,but is it possible not to kick mYself?

Post by **KEN** » Sun Nov 06, 2011 9:55 pm

[null] is not a name.
there is a limit on the number of users a room can have..suppose there is 1 room and it's full and one new user logs in so then he is send to [null].

in front of or sympols like _][*® ™ * ڰ ۞© ❼{ these commands are completely useless

i myself was figuring out about that thing in the past.I left it unfigured @.@ might try it again now.

Then i went to the page source of that page but is showed only users name again from the 1 room with some in front of the names but still NO null users.How do you explain this?

Well i think that info page doesn't show private rooms and [null] :/ so it's useless now :o

Also i tried the kickout command it was really helpfull,but is it possible not to kick mYself?

you need to have admin pass to not kick yourself hehe :p

you can visit admin panel from:

chat/admin/index.php?899254178

try getting the pass then you should have no problem :)

loki · Post by **loki** » Sun Nov 06, 2011 11:36 pm

KEN so I suppose there s no answer in anything?? xDDDDD SSomething else, is it possible to ban one user for ever ?i know it is extreme but it s a questionXD, and does this kickout affect the real admin also??this would be perfect,moreover if i understand well you mention with these packets i cannot ban the admin?Once i tried and i succed.:P

Post by **KEN** » Mon Nov 07, 2011 6:52 am

can say for sure but if i remember right then admin cant be kicked out with that packet but a mod can be kicked out..

as for that person in [null]
I might find him when I'm on the chat..just wait and keep testing with things.Try finding those special character things.I want to know how to ban and ignore with commands those special character names.

loki · Post by **loki** » Mon Nov 07, 2011 1:08 pm

KEN i just got banned from the chat from the real admin.I have tried many times to change my ip,latest with the hide my ip but i think it doesnt work because of the version of the firefox.NOTE that i have static ip.How can i change it easily?Also if the admin gets my ip what can he do against me and my privacy?THANKSS

Post by **KEN** » Mon Nov 07, 2011 1:16 pm

that ban lasts for about 8 hours.Use a proxy like 'TOR' or 'foxyproxy' addon for firefox..or read this topic: http://sethioz.com/forum/viewtopic.php?f=50&t=314

He cant do anything.

loki · Post by **loki** » Mon Nov 07, 2011 1:30 pm

the real admin just post my ip in public to scare me and i ban him :D from null :D.Is it dangerous?

Post by **KEN** » Mon Nov 07, 2011 4:26 pm

Good that null banning succeeded.. :D
Nothing is dangerous..dont worry about anything..

Now just try to figure out about the special character thing.