aolexploit

Date Fall 1998Founded AlanSubmitted By O0OSource AOL-Files.com/FDO-Files.com Archive AOL’s network is made up of hundreds of Unix boxes which all run the same server software written by AOL called “AOL Server”. Alan found an exploit in AOL Server which allowed anyone to access the tcl compiler for the Unix Box. Using this tcl compiler exploit Alan was able to root dozens of AOL Unix boxes running AOL Server. Using…

Date 1998Founded JaySubmitted By dbSource AOL-Files.com/FDO-Files.com Archive This was a pretty interesting exploit. When you go to kw: billing to change your pricing plan the token used was “Ra”. At the time the “Ra” token had no viewrule on it for Price Index’s with no billing such as 77(CL) and 0 (OH/Internal). Jay discovered that you could use the Ra token for any Price Index. All you had to…

Date 1998Founded Various in `98 Discovered it for OH/Internal Accounts. In 2000 it was found for Regular accounts as well.Submitted By Cam0Source AOL-Files.com/FDO-Files.com Archive Rainman ID Viewrights is normally a feature given to people with Rainman access. Viewrights changes the way forms load up on AOL. Instead of the title being the first thing shown in the title bar there is additional information shown in this format: [321-23780.3197.MAINPAGE] AOL…

Date November 1998?Founded MrKane & Many OthersSubmitted By robSource AOL-Files.com/FDO-Files.com Archive By Editing the HTML code’s in AOL’s AIM registration webpage you could make AIM names longer than 10 characters.

Date November 1998Founded O0OSubmitted By O0OSource AOL-Files.com/FDO-Files.com Archive In late 1998, AOL introduced a new feature which allowed more than one screen name to be a Master sn with account creation/deletion rights. You can make one of these sub-account master sn’s a “ded” sn by signing onto it and going to kw: Names. Once there, using FDO, you can edit the delete sn listbox and put in the current…

Date Summer 1998Founded UnknownSubmitted By GLSource AOL-Files.com/FDO-Files.com Archive The AIM registration process allowed 2 char screen names to be created along with indented screen names. Indents could be over the 2 character limit present in the recent indent exploit. Several of these screen names with 3 or more spaces indented still exist today along with several of the 2 char AIM’s made using this hole.