lulz disclosure: anti-sec.com pwnage! | rise of the ProSec group

JANUARY 4, 2010

let me start this with a warm LULZ regard to all Hacking Expose! readers
and happy new year 2010 to all security enthusiast around the world! ;-)
whoever, wherever, and whatever you are, either white/grey/blue/red or black hat
(or kopiah hat like me ;-) i wish you all best of luck in 2010.

so lets start with our amusing story for the year 2010.
for those who not follow the epic while back:

More on astalavista pwnage expose by anti-sec group
http://hackingexpose.blogspot.com/2009/06/more-on-astalavista-pwnage-expose-by.html

SSANZ Server Systems Administration NZ Hacked by antisec
http://hackingexpose.blogspot.com/2009/07/ssanz-server-systems-administration-nz.html

Imageshack Hacked by Anti Sec Movement.
http://hackingexpose.blogspot.com/2009/07/imageshack-hacked-by-anti-sec-movement.html


ProSec or "Pro Security" is declaring revenge against anti-sec movement.

What you are about to read is the complete destruction of the "Anti-Sec" group.
An organization known as "ProSec" contacted us with reports containing information
about the entire group and how it was operating. We don't know who they are, they
appear to be well-funded and top notch security experts and what they have done
against the group is invaluable to us and others that they have and or would have
been targeted. ProSec did want me to portray a message that organizations similar
to the Anti-Sec will and are currently being targeted by the movement. ProSec already
has access to a number of them and are continuously monitoring and gathering
more information about the various groups and will release information when applicable.
No longer should whitehats fear these groups, as soon as an individual is targeted,
they will target right back. This is a warning shot to those out there that target us.
I want to thank ProSec for the work that they continue to do and understand why this
movement is so important to the security community.

On the 4th of June 2009, a group named "Anti-Sec" decided to expose Astalavista group after
they successfully exploited what was rumored to be a Litespeed 0day exploit which in reality
does not exist. After looking up on this more and more, a couple of days later we found out
that the responsible person behind this attack was a Saudi-Arabian with the nickname RoMeO,
so we decided to let the other Astalavista staff know about our findings. Joao Pontes,
one of the senior Astalavista administrators decided to warn his friend RoMeO about it and as
you will notice below Joao Pontes (rorkty) knew from the beginning that Astalavista group was
compromised by his closest friend and decided to do nothing about it. Later, on the 9th of June
one of my dedicated hosting servers, running a couple of websites was targeted
by the same "Anti-Sec" group providing fake and misleading information to the public.

               __  .__                    
_____    _____/  |_|__| ______ ____   ____
\__  \  /    \   __\  |/  ___// __ \_/ ___\
/ __ \|   |  \  | |  |\___ \\  ___/\  \___
(____  /___|  /__| |__/____  >\___  >\___  >
   \/     \/             \/     \/     \/ *no more*
get yours http://www.network-science.de/ascii/


[0x00] [Introduction]
[0x01] [Forensics]
[0x02] [Target Profiling & Lulz]
[0x03] [ownage.net - prosec]
[0x04] [vitalspeeds - prosec]
[0x05] [makosolutions - prosec]
[0x06] [holeinthewallhosting - prosec]
[0x07] [darkmindz - zf05]
[0x08] [Backdoor RCE]
[0x09] [SEO Optimizing]
[0x10] [Reporting]
[0x11] [Attachments]
[0x12] [Conclusion]
[0x13] [Greetz]

Read more:
http://www.anti-sec.com
http://pastebin.com/f12f6f9c0
http://pastebin.mozilla.org/694145
http://stashbox.org/755566/antisec.txt