What's new
By:
  • Visit Rebornbuddy
  • Visit Panda Profiles
  • Visit LLamamMagic
  • Visit Resources
  • Visit Downloads
  • Visit Portal

Is it possible to "hijack" PB profiles and force send mats/gold to other accounts?

W

wr9966

Member
Joined
Jan 15, 2010
Messages
112
Reaction score
0
I've been using [BETA] Bengan 4.1.1 for a while now and just today I wanted to have it start mailing mats to other toons so I set it up appropriately. Let it do its thing and as it was sending the mats, the name in the email changed to a different toon than what I entered!!!!!!

WTF! There is a lvl 1 toon on my server with that name and I noticed that the guild it is associated with it has multiple lvl 1 toons with the same name/guild on multiple servers.

So my question is this - since I downloaded this profile from here - is it possible that someone hijacked it and wrote code to send to their alts as a scam???

I did a key word search on the XML file looking for hard code showing that toons name but did not get a hit on it.

This concerns me greatly as the amount of gold/mats I've used over the past year may have been partially hijacked and I had no clue.....
 
it would have to be in the profile/plugin or possibly in bad version of HB IE not using the official version from here.
 
That's what I'm saying. I wonder if there is a bad version of the profile as my BH is official as are all my plugin's. I've never seen this happen until today when I tried setup the mailing of enchant mats.
 
This is semi-off topic, but are you using the beta Bengan's profile, or the mini profession one that just prospects/mills/inks? I tried getting the beta to work, but with no avail. Being able to pull mats from the guild bank would be amazing, though.

Sorry for the somewhat diverted post.
 
once again what profile is this link me to it so i can see if there is some code in it that is forcing mailing to a toon that you did not input
 
wr9966 said:
Let me see if I can upload it here, as I no longer see it on this site.
Click to expand...

see that makes it seem fishy to me even more if it is not up here. I will research it when you get it uploaded.
 
Yeah, this is definitely odd, as the original beta profile that's in Bengan's SVN folder doesn't work (which is why I was inquiring). HOWEVER, if you find that the profile is clean, I'd love to use it... I'll keep a close eye on this thread for sure.
 
I would assume right now that it's not. What are the odds of a plug in from here (and only from here) looking for that specific profile to activate a change in one specific part (mailing mats).

I fully screened all my chat logs, emails, etc, and the "toon" name that appeared in my email box - not once, but twice - even after I deleted it the first time - had never been in any type of contact with me or me with them.

If it's a bug of somekind - wow - what a bug, to pick the name of a lvl 1 toon that actually exists and then to send mats to that toon......
 
Oh I hear ya... that'd be one hell of a scheme to have, though... fix a helpful profile with one little caveat.... you send mats to them.

I'm confused though... you said a plugin from here looking for that specific profile? Which plugin would that be? Maybe I'm just reading it wrong...
 
I looked through the profile for quite a long time and never found anything for it to send to a different toon than what you have specified. Only thing i could think of is it was another addon in wow or plugin that may have done it. Because there are quite a few addons that will autofill mailto. And it is very possibly a plugin did it as well. But from what i can see the profile was clean.
 
I'll give it a shot today and see what my results are. My plugin list is barren, save for a couple of gathering ones that are rarely used.
 
You must log in or register to reply here.
Back
Top