How to get free items and money in runescape

Feed

Image 1 of 4

Author: simon says

Started: January 24, 2006, 6:11:06 pm

Target: runescape players

Category: Uncategorized

Supporters:

318

Goal:

10,000

Goal Progress:

Status

Active

This petition has been detected by our system as a possible phishing/scam attempt. It is very possible that this petition is attempting to collect usernames and passwords.

Never post any password on PetitionSpot and never give anyone your login credentials.

So check this out, there is a way to get any amount of money you ever dreamed of. Janex keeps records of all your money and items in a mysql table at www.runescape.com:7121 (you can't access it thru the web you have to connect) they use a java to interface to a cgi script that requests information form the mwsql table and also writes to the table. You can perform a bufferoverflow onto the table and cause then input commands to edit the table. Reciently there has been found a way to perform this buffer overflow remotly. To do this, email cg.bin_runescape@hotmail.com and in the subject put:
SELECT runescape.com:7121
and in the message put:
0x00000001' OR '1==1-- UNION ALL SELECT FROM (table.username.) && FROM (table.password.)
[make a new line in the email]
0x00000002' OR '1!=1-- UNION ALL SELECT FROM (table.money.value=) && FROM (table.items.(,,...))
[make a new line in the email]
0x00000003' OR 'a==1-- SEND REQUEST.runescape.com WRITE (table.referer.value=runescape.com)
[make a new line in the email]
0x00000004' OR )a==a-- Buffer.value=(0x0000FFFF)
and thats it, its a bit hard i knwo but this will give you ur dream items, jsut make sure to put ur username in whereit says (remove the <'s) and put ur password wehre its says (withought the quotes). Also, you can not log in for up to 24 hours after you do so, as this will be rewriting the you usertable,a nd if soemthing changes durign the rewrite it will be out of sink. You will know when its ok when you get a response from "cgi_server@runescape.com" which will have 0xFEDCBA98 in the subject. and the message will say "ERROR IN buffer.value>=MAXVALUE" this means that it worked, good luck and have fun, also it may take several requests to the server, as it may be too busy at the time u send it.