AOL/AIM Exploits

Date Date: Fall 2000Founded UnknownSubmitted By GLSource AOL-Files.com/FDO-Files.com Archive Occasionaly the certain parts of the AIM server would go down which allowed suspended AIMs to be signed onto. An easy way to tell if the server was down was to select the “Update email” option on the AIM client. If it came back “unknown” then it would be possible to sign onto any suspended AIM that you had the.....

Date November 2000Founded Language code atom discovered by BMBSubmitted By O0OSource AOL-Files.com/FDO-Files.com Archive BMB was able to port the “as” token exploit over to the PC by finding an atom which set the language code. The atom was uni_next_atom_typed. Placed within an FDO script this allowed PCers to make indented screen names and hijack AIM accounts.

Date Early 2000Founded HypahSubmitted By O0O and HypahSource AOL-Files.com/FDO-Files.com Archive Using the same language code principles he discovered when finding the Aa token exploit, Hypah was able to figure out a way to make 2 character indented screen names. Although, at first Hypah figured out you could hijack AIM screen names doing this. During the account creation proccess the as token, which sets your screen name, did not check.....

Date Early 2000Founded HypahSubmitted By O0OSource AOL-Files.com/FDO-Files.com Archive Using a scanner program Hypah looked through all the various language codes searching for any wierd responses. Using this scanner he was able to find several language codes, one of them 1221, which would send a message using the Aa token to a chat room. The message would come from online host and say. OnlineHost: has sent a message that your.....

Date Summer 2000Founded Cam0Submitted By Cam0 with additional information from O0OSource AOL-Files.com/FDO-Files.com Archive Updated 2.4.2001 The trick was done similar to an earlier exploit with the Ra token found by Jay. A pricing plan change could be submitted for any Price Index including index 77(CL account) and 0(OH/Internal). Although setting your PI to 0 would not upgrade your account to the viewrule status of a OH/Internal, it would still.....

Date 1997Founded UnknownSubmitted By CJSource AOL-Files.com/FDO-Files.com Archive This ‘exploit’ allowed users to send completely blank IMs, which also removed the screen name of the sender from the IM window. This trick was used by various punter programs so that you could not copy/paste any screen name from the IM window to make a report to CAT. To do this, you needed to send an IM with just (A HREF).....

Date 1997Founded Tang, LyriX and othersSubmitted By HypahSource AOL-Files.com/FDO-Files.com Archive In 1997, people in macfilez saw Tang, LyriX, and others get 23 copies of the exact same screen name in one room. Quite simple, really…you would connect, block the SC token, enter a room, then disconnect and repeat. Each connection added the name to the room. AOL fixed this in private rooms first, then later, conference rooms. Then, entering.....

Date 1997 it could be done using AOL 3.0 32-bit and later using 4.0 and 2.5Founded VariousSubmitted By TauSource AOL-Files.com/FDO-Files.com Archive Cloning, as it has come to be called, is the process of signing onto more than one screen name simultaneously on the same computer. There are however two restrictions that you should be aware about before beginning. First, you have to use whatever America Online version you are currently.....

Date Fall 1997Founded Lithium NodeSubmitted By O0OSource AOL-Files.com/FDO-Files.com Archive This was the first star tool to be discovered since early 1996. It was also the first for the newer 32 bit versions of AOL software designed for Windows 95. It had an Atomic Debugger integrated into master.aol. This was far stabler than the stand alone debugger being used for AOL 2.5/3.0 16 bit. It was found in the MMDev file.....

Date July 1997Founded O0O, Lance and a couple others from Lithium NodeSubmitted By O0OSource AOL-Files.com/FDO-Files.com Archive The tokens to hide/unhide new style message board posts had neither a viewrule or a roster control. This allowed them to be accessed on any message board on AOL. It allowed any AOL account to list hidden posts and hide/unhide posts on any New Style Message Board. This exploit was used to take.....

Date Summer 1997Founded Lance of Lithium NodeSubmitted By O0OSource AOL-Files.com/FDO-Files.com Archive Lance created the first major PC FDO file. Done completely in FDO it did not feature any major programming tricks but it was the first FDO file to feature links, etc in listboxes and buttons programmed using FDO.