Really? I want a picture. . .

[cilpolir]

great start of the day

[Bren2010]

@sanddbox - You control f-ed *says like poison*?!? Where is your hacking spirit!!

@clipolir - ikr

[tremor77]

big or small radio station it's no surprise really, then tend to delegate webmaster duties to a dj who shows proficiency with word.

[msbachman]

This was kindof neat: http://www.b937online.com/server-status

Idk if you can do much with it though. I'll check back later to see if sanddbox fucks up the polls lol.

[tremor77]

http://www.intertechmedia.com/ is the hosting, cms, content provider.. and they has an a$$load of sites and servers... and I had the time to tool around a bit and managed to mine a ton of data and get into some areas that well....... bordering on the very gray so I won't go too deep with details.. in fact, wondering what I should do with my findings.. seems like guys like us who go to these companies with their security failures often get shafted even though our intentions are good.

If you want to start going where I've been... here is where I started finding the real holes - http://vortal.intertechmedia.com/FCKeditor/editor/ it's not too much of a hop, skip and jump to that location from what y'all had posted prior.

I wash my hands of this at this point.. braver souls with less of a record than I, may proceed. Or delete this post entirely... trying my best to obey the rules yet spread knowledge... how am i doing so far?

[Goatboy]

tremor77, thank you for posting that completely informative website. I am sure we can learn a lot from it's structure, and not do anything bad with it. Because that's not what we do. At all. Ever.

[mRmasteRful]

Thank you sanddbox I got tired of cntrl f-ing <!-- . Exactly why were you looking through this random site's coding? I could think of at least 10 better things to do like sniffing Canada's toxic air or visiting Canada's free pool (yeah there are no free pools where I come from. Score one free pool for me )

[Bren2010]

@mRmasteRful - What do you think? It's a local radio that's constantly playing commercials, but they have good music that I want to own, but they don't sell that music on iTunes. Now, what do you think I was doing on that page with all the music on it? Er, um, because I was really viewing the source to see how they get their music streams... for educational purposes only.

EDIT: Why are you bashing on Canada? I don't even know what your talking about.

[tremor77]

@Bren2010 - did you followup on any of the info I posted? More free music, just google for "Powered by Intertech Media, LLC" and you will have several hundred, radio station and other media websites, that use a poorly secured SaaS, CMS and hosting company.

Just FYI - If I were to 'hypothetically' attempt to login to the cms editor accounts of any number of these websites, you may find that 'theoretically' radio station dj's with blogs and editor access to their station's websites, (hypothetically speaking) are not very creative with their account password settings. And I'll leave it at that.

***
Ironically enough, I work for a media company that owns several radio stations... and although they don't use Intertech hosting and CMS directly, they do use some of their partner services... so I am in a way familiar enough with them to have some unfair background knowledge... which would, 'in theory' make it easier for me to know where to go for certain things... ya know.. for educational purposes only.

[Bren2010]

Eh. I looked through a bunch, and (surprisingly) a lot of them deny access to their subdomain. The ones that don't don't have anything to protect anyway. I suppose I could start scoping out sites like I did this one, but I'll wait for sanddbox or goatboy to do it.