AOL/AIM Exploits · January 27, 2014 0

Examine Object Info(EOI) from any AOL account

Date January 1998
Founded Slushie and Uaert
Submitted By O0O
Source AOL-Files.com/FDO-Files.com Archive

Slushie and Uaert found that the Rw token was not viewruled nor rostered. By sending the Rw token and an arg such as 56-2923 you could pull up the Examine Object Info for the token. EOI is used mainly in conjunction with Rainman and was valuable because it gave information on who created the object, which tokens linked to it and it also gave the aol://(url) address of the object.

The Rw token was used when AOL accounts with Rainman publishing rights had access to two or more Rainman Groups. Since objects could have the same external ID and be in different Rainman Groups, AOL designed the Rw token to allow you to choose the particular Rainman Group you wanted the EOI feedback displayed from. For instance, if you had access to two Rainman groups and you looked up the external ID “hello”. A listbox would normally appear with two instances of the ID “hello”, one from each Rainman group.

After AOL patched the Rw token, Rainman users were no longer able to get a list of all the objects using the same external ID. Instead they had to type in the Rainman group AND the external ID in order to view the EOI feedback i.e “1928.tos blah”