[IJJI] G Coins hack (Public)

IJJI G COIN EXPLOITS

SQL and JavaScript Injection / XSS / PHP additions / HTTP and HTTPS header modification

WORKING January 1, 2009!

Credits to Mirage & Lolhax

This method bypasses the need to PAY for ijji coin.

This is possible because there are vulnerabilities in the ijji website.

Instructions:

1 Login here

2 Click “Add G Coins”.

3 Enter the following in the address bar: javascript:chkAmount('">')

4 Select an amount (DO NOT SELECT A METHOD). You can only pick up to $50 for now, repeat steps 2-5 for more G coins.

5 Click OK. You should be redirected to the ijji main page. If you weren’t redirected, it didn’t work.

6 Enjoy your new G coins (as many as you selected as your amount).

You SHOULD get the G Coins instantly. If not, they should come in about 15 minutes.

If you have problems, contact me.

The page in the instructions is just like the ijji website, but with modified HTTP/HTTPS headers, minor SQL injections in the forums and modified PHP pages and few XSS exploits, to successfully bypass the need to pay for G Coin, and get it entered into your account.

Here are some screenshots:

For those into website coding, this is how it’s done (very simple):

As we all know, ijji is infamous for its website exploits (like the security answer), the method of the payment (like Google Checkout) is now injected as a method that doesn’t exist using both XSS and SQL injections, plus the forms of the website are modified to stop any errors from occurring. It basically nulls any need to pay for it.

The HTTP/HTTPS headers are used to bypass any payment websites that ijji will attempt to send you to.

This works because of the lousy coding of the ijji website.

And, of course, like all of the other exploits, this will be patched fairly quickly, so do it now or soon.

ijji relies on too many client-sided scripts, and not enough server-sided, which allows us to also make GM names, bypass ban/termination, etc. described in my next tutorial.

I suggest getting no more than 5000 G Coins.

You will probably get banned if you surpass this limit.

Don’t overdo it!

Sorry about foreign language...

See login site tundub kahtlane, ei soovitaks

ei tea , mul ei t66dand

Muuda parool koheselt ära, kuna sellised asjad on tihti scammiks.

EI tööta

Annad äkki lingi kust said selle?

It doesn't work.

I can't select a amount, it says I have to select payment method first..

It doesn't work.

I can't select a amount, it says I have to select payment method first..

Omg omg... tegid ikka noobi acciga?

Seda aadressi vaatasid üldse w?

Guugelda "ijji g coin exploit" leiad sitax lehekylgi kus inimesed ütlevad et see scammer site.

Mingi pead maksma seal ja siis vastu ei saa midagi.

Vana süsteem juba...

Omg omg... tegid ikka noobi acciga?

Seda aadressi vaatasid üldse w?

Guugelda "ijji g coin exploit" leiad sitax lehekylgi kus inimesed ütlevad et see scammer site.

Loomulikult ma tegin uue acci selle jaoks, loooool.

It doesn't work.

I can't select a amount, it says I have to select payment method first..

Yeah ijji fixed that bug...

Like 6-7 hours ago....

Yeah right.

Nice try.

Free accounts?

Lollakad läksid arvatavasti õnge ka.

Ammu selliseid asju tehtud juba, lukku see teema.

Puhas scam.

Kui teete , tehke noobide accidega , algne katsetus .

See on ju nii läbi näha, et tegemist mingi scammiga imo...

Pange lukku

See on ijji lehekülje koopia mis salvestab sisestatud andmed!

Rohkem infot - http://en.wikipedia.org/wiki/Phishing