I-Appliance BBS
The Official Source for Internet Appliance Upgrades and Mods
Amazon Honor System Click Here to Pay Learn More
BBS Main List | Sign In | Sign Up | Search | Help | Linux-Hacker.netReply to Thread | Printer |

Home / WebSurfer Areas / WebSurfer General Posts
Hidden Websurfer QNX info, and Company info
info found on websurfers servers about the company, marketing, and access to the QNX control panel.

New MessageHidden Websurfer QNX info, and Company info (modified 0 times) diverse
Profile
ok.. sorry for the long post.. got alot to share... Also I am posting this in a couple places on purpose since it has technical as well as general info.

Acording to the BB, someone else had been poking around theire website.. well I had been too... well not just their site.. but the huge block of IP's they have. I was waiting to organice my info better.. but I guess it's time to pass on the knowledge.. let someone else filter and organize. oh, and yes the most interesting stuff is at the bottom.. the password and spec sheet, if you're not interested in what the company is up to.. you may want to skip down to there.

DISCLAIMER:
All this info is available on there servers.. I'm not stealing or copying any tradesecrets, Copyrighted Material, or in any other way violating any known laws intentionaly! I am also under no signed or verbal agreement with websurfer (such as the TOS). I am not condoning or suggestin that you do anything illegal with this knowledge.. or illegally pry into websurfers company. :)

first of all.. don't bother trying to social engineer anything out of techsupport, they outsource there tech support to a place that handles support for hundreds of companies.. so you can't get an engineer on the phone or anything.. the tech people simply aren't trained with much info, and don't even work directly for websurfer. also, as someone else mentioned the company is based in canada.. so terrance and philip probably have something to do with this whole thing.

http://upgrade.websurfer.com/UpgradeModules/
used to upgrade the websurfer automagicly.. not much there right now

http://register.websurfer.com/Registration/
not much.. just interesting that earthlink and mindspring are listed. mind spring is also here:
http://www.websurfer.com/mindspring/ and http://www.websurfer.com/msportal/
when are we going to start seeing the bestbuy / mindspring version?

http://www.websurfer.com/Press/MediaKits/PasswordPage/MediaPresentations/mediapresentations.html
this was posted above.. but i wanted to provide this alternate link (had html version, not just pdf)

wanna know all the marketing details? check out this page and all the side menu items.. interesting info on costs/etc.
http://www.websurfer.com/details/packages.html

http://www.websurfer.com/test/
must be testing for a new layout of the website.. couple neat things like it mentions: There are 2 devixes.. webpad, screeenphone, kitchen appliance, etc., and they are going to use pretty 3d renderings to show them all, since they don't exist yet!

http://web.websurfer.com
this is the site that your websurfer accesses as a homepage/portal once it's all setup

http://web.websurfer.com/usermanual.html same as printed manual I think, in case you lost yours (useless pretty much)

http://web.websurfer.com/allwell/
directory full of stuff.. they still haven't disabled directory listing here.. most off this is all the printed manuals and other stuff that comes with the websurfer, including such things as the box design and even fcc sticker that goes on the thing. there is one more intersting item though:
http://web.websurfer.com/allwell/BuildC-EVO-CD-1616-7_4N-US-N00-1-1-1_21-YY.zip
this appears to be the entire compiled 12 meg binary of the os that is on your DOC. notice the number matches that of your websurfer when you do ctrl + GOTO-key (2 keys left of spacebar) (thanks to "done waitin" for the original keyboard command)

not sure what all this is yet.. maybe someone else could take the time to look.. I'm swamped right now.
http://web.websurfer.com/registration/specs/
http://web.websurfer.com/registration/specs/MalibuServerSRSv2.zip
http://web.websurfer.com/registration/specs/MindSpringMiddleWare.zip

http://telephony.websurfer.com:8000 perhaps is interesting to someone.

http://websurfer.snap.com heh, so the are inbed/trying to get inbed with Earthlink, Compusa, Snap, and Mindspring.. who else I wonder? will microsoft's new xbox kill them?

oh yeah.. and saving the best for last:

http://209.5.32.201/ interesting eh? but no links really work... however on that server we get:

http://209.5.32.201/WebsurferTests/ (tells stuff about your websurfer.. only works using theire browser though)

and here is my almost favorite: http://209.5.32.201/UpgradeModules/ (hurry before the turn off directory listing!)
why is that so kewl you ask, because.. if you download: http://209.5.32.201/UpgradeModules/upgradepkg-boot-n.tgz
then decompress it .. you find a file called registry.new which has lotsa info.. like the passowords to the key combo's listed in this thread:
http://www.linux-hacker.net/cgi-bin/UltraBoard/UltraBoard.pl?Action=ShowPost&Board=wstech&Post=91
and even more key combos.

---
and in my best cable-guy voice... the password is: f1n9eR
---

there are other passwords, but that is the control panel read/write one.

so, with this info.. hopefully some people will keep poking around and find more about the qnx that's on there... on a seperate note/install, It would be kewl to make a custom qnx mp3 player and put that one there.. no overhead.. just a home/car mp3 player box and os/app.

ok, my favorite ever link, woo hoo... http://web.websurfer.com/emarfr/Client%20Spec%201.0.zip

well yallll, hope this has been fun.. sorry for the long ass post! Hope too see alot of follow up post if anyone figures out how to use some of this info.. but either way.. it was fun. oh, if any of these files get moved.. someone email me, and I will mirror them on my site http://www.geocities.com/d1v3rs1ty/

this project is great fun.. thanks to all that are involved.

05-01-2000 12:51:09

New MessageRE:Hidden Websurfer QNX info, and Company info (modified 0 times) Datoyminaytah
>and in my best cable-guy voice... the password is: f1n9eR

finger?

05-01-2000 13:48:37

New MessageRE:Hidden Websurfer QNX info, and Company info (modified 0 times) Mesach
UGH... no, f1n9eR not finger
05-01-2000 13:51:19

New MessageRE:Hidden Websurfer QNX info, and Company info (modified 0 times) Mesach
UGH... no, f1n9eR not finger
05-01-2000 13:51:24

New MessageRE:Hidden Websurfer QNX info, and Company info (modified 0 times) diverse
Profile
from the registry file:

(2)BACKDOOR
passwdread = "thum8"
passwdreadwrite = "f1n9eR"
resetpasswd = "5e5eT"
bypass = "password"

05-01-2000 13:51:45

New MessageRE:Hidden Websurfer QNX info, and Company info (modified 0 times) kinky
Some very interesting TCL scripts here
http://web2.websurfer.com:8000/surfphone
They have some very interesting TCL scripts that authorize users to login into the server and stuff. You will not get the .tcl scripts, so concentrate on the edit backups (*.tcl~)

More later.

05-01-2000 13:56:50

New MessageRE:Hidden Websurfer QNX info, and Company info (modified 0 times) yomama
(2)REGISTRATION_ISP
name = "AboveNet"
tsusername = "surfacct"
tspassword = "zQ2rKsaPJ"
dns1 = "209.249.219.29"
dns2 = "207.126.96.162"
npa1 = "888"
nxx1 = "251"
ext1 = "1781"
npa2 = ""
nxx2 = ""
ext2 = ""
phone1 = "1-888-251-1781"
phone2 = "1-888-251-1781"
paporchap = "PAP"

If you want to hack the registration process

05-01-2000 14:04:07

New MessageRE:Hidden Websurfer QNX info, and Company info (modified 0 times) Datoyminaytah
>UGH... no, f1n9eR not finger

UGH...yes, I know it's "f1n9eR". I was commenting on the 1Am3n355 of such an A0l-typ3 pa55w0rd. :P

05-01-2000 14:34:50

New MessageRE:Hidden Websurfer QNX info, and Company info (modified 0 times) Mesach
Ok Cool... oh ya they are 1337 |¬@xø®§... i forgot
05-01-2000 14:41:04

New MessageDown already? mirrors please... (modified 0 times) nonic
The system returned:

(111) Connection refused

The remote host or network may be down. Please try the request again.

Generated Mon, 01 May 2000 22:57:12 GMT by x.x.40.23 (Squid/2.2.STABLE4)

---

Bah, /.ed or they've taken down the server for a while. Has anyone uploaded the files to their own site yet? Also, beware they are logging IPs.

05-01-2000 16:03:29

New MessageRE:Hidden Websurfer QNX info, and Company info (modified 0 times) diverse
Profile
yeah, the site seems to be down.. they had been moving stuff around, and removing files just before that.. so I think it's there own doing. someone else may have decided to haxor em though.. who knows?

too bad they noticed what was up... considering how poor thiere security was.. i'm suprised they ever even look at their log files!

and good poing about ip's... everyone keep in mind that things can ALMOST always be traced back to you.. with enought diligence... that's why i was just lookin and linkin.. i didn't subvert any passwords or nothin ;)

05-01-2000 16:09:00

New MessageRE:Hidden Websurfer QNX info, and Company info (modified 0 times) Mesach
Goto someplace less secure and more public to do some lookin like from kinko's or the public library... how they gonna trace ya there???
05-01-2000 16:59:46

New Messageit's gone (modified 0 times) dechanic
the site has been shut down and I dont expect such a weak system once they come back.
will some kind person please post the files to a feedrive account or something
05-01-2000 18:22:03

New MessageRE:Hidden Websurfer QNX info, and Company info (modified 0 times) diverse
Profile
files mirrored, info updated:
http://www.geocities.com/d1v3rs1ty/
05-01-2000 19:55:49

New MessageRE:Hidden Websurfer QNX info, and Company info (modified 0 times) done waitin
Profile
thanks diverse, I appreciate your efforts to up the files,please up the qnx image soon.

this is killing me haha I nuked my image... I want to play too

05-01-2000 20:56:48

New MessageRE:Hidden Websurfer QNX info, and Company info (modified 0 times) d-ude
i doubt that the site was taken down...they probably just enabled an IP filter, so only those dialed up to the service can see the sites. nothing we don't do at our ISP to give 'members only' services....
d-ude
05-01-2000 22:49:45

New MessageRE:Hidden Websurfer QNX info, and Company info (modified 0 times) d-ude
oh i forgot to mention...i'm posting this from my hacked websurfer dialed up to my ISP....set the start page to our website and the search page to altavista :)

d-ude

05-01-2000 22:51:43

New MessageRE:Hidden Websurfer QNX info, and Company info (modified 0 times) diverse
Profile
You may be write about the web.websurfer.com site being filtered, but thier main site www.websurfer.com is also down.
05-02-2000 00:46:37

New MessageRE:Hidden Websurfer QNX info, and Company info (modified 0 times) done waitin
the dial in number is also shut down. It's been busy for about 6 hours. not a regular busy signal. a generated rapid tone one. I know because i used to work at a phone company and we would send out that signal when we shut down a line.

bet they are buzzing around like bees there.

think about this for a minute...

all the thousands of websurfers out there and they contain these url's for registration and update. how can they block these? IP filtering works to some extent but anyone can dial the registration account and then access the files with their assigned IP.

I found the username and password a few days ago by rigging my websurfer to dial into my PC and using portmon to view the transmitted ascii characters. I was trying to find a way into the registration through the protocols. unfortunatly that was a bit over my head.
You can surf the web with this account. I did for a few minutes.
what will they do to block anyone from doing this? the url's cant change or everyone who tries to register wont be able to.

05-02-2000 04:15:09

New MessageRE:Hidden Websurfer QNX info, and Company info (modified 0 times) Duh!
If you really worked for the phone company, you'd know that that fast busy signal is called a "reorder tone" and is also used if the circuit could not be completed, like when every inbound trunk is busy.

Every geek who reads this probably has got their modem set on auto-redial. You guys need lives.

05-02-2000 13:58:30

New MessageRE:Hidden Websurfer QNX info, and Company info (modified 0 times) kinky
done waitin,

You can get the 12MB DOC QNX image from
this thread

05-02-2000 16:10:00

New MessageRE:Hidden Websurfer QNX info, and Company info (modified 0 times) done waitin
thanks kinky
05-02-2000 17:59:31

Reply to Thread | Printer |
All times are PSTPowered by UltraBoard v1.62



Copyright © 2000, Netmake Inc. All Rights Reserved.
See Terms and Conditions for more information.




i-opener opener laptop notebook computer help drivers dll free windows dos repair fix linux mac macintosh 2000 95 98 nt pc configure hardware software sound video netscape explorer network networking lan wan software cmos fat bios printer card mouse modem ide scsi cd rom controllers scanner tape hard drive cgi scripts source code mp3