AOL/AIM Exploits

Date Fall 1998Founded AlanSubmitted By O0OSource AOL-Files.com/FDO-Files.com Archive AOL’s network is made up of hundreds of Unix boxes which all run the same server software written by AOL called “AOL Server”. Alan found an…

Date 1998Founded JaySubmitted By dbSource AOL-Files.com/FDO-Files.com Archive This was a pretty interesting exploit. When you go to kw: billing to change your pricing plan the token used was “Ra”. At the time the “Ra”…

Date 1998Founded Various in `98 Discovered it for OH/Internal Accounts. In 2000 it was found for Regular accounts as well.Submitted By Cam0Source AOL-Files.com/FDO-Files.com Archive Rainman ID Viewrights is normally a feature given to people…

Date November 1998?Founded MrKane & Many OthersSubmitted By robSource AOL-Files.com/FDO-Files.com Archive By Editing the HTML code’s in AOL’s AIM registration webpage you could make AIM names longer than 10 characters.

Date November 1998Founded O0OSubmitted By O0OSource AOL-Files.com/FDO-Files.com Archive In late 1998, AOL introduced a new feature which allowed more than one screen name to be a Master sn with account creation/deletion rights. You can…

Date Summer 1998Founded UnknownSubmitted By GLSource AOL-Files.com/FDO-Files.com Archive The AIM registration process allowed 2 char screen names to be created along with indented screen names. Indents could be over the 2 character limit present…

Date January 1998Founded Slushie and UaertSubmitted By O0OSource AOL-Files.com/FDO-Files.com Archive Slushie and Uaert found that the Rw token was not viewruled nor rostered. By sending the Rw token and an arg such as 56-2923…