WEB HOSTING POWERED BY HULK HOGAN

[Pæs]

http://hostamania.com/

[Pæs]

In the less than ten minutes since I shared that here, I made a website.

SFW, except for the URL: http://buttfuck.hostamania.com/

Rapid rollout for ridiculous pages sounds exploitable as fuck.

[Pæs]

Okay, they failed to reserve subdomains, so I got: http://m.hostamania.com/
Also got blog.hostamania.com but their real blog takes precedence.

[Pæs]

Also this lets me execute random javascript on the page. TOTALLY SAFE. Except that I can use jQuery to replace the entire page with whatever content I like, or redirect anywhere from what appears to be an official business page, or other more dodgy stuff.

I think I am going to seriously upset Hulk Hogan with all these tweets I am sending his company explaining how bad the website is.

[Pæs]

I've asked them to delete all the pages I made as part of my "here's what I did to your website" email, so in case nobody gets a chance to visit (I doubt they'll get it down that fast) image of m.hostamania.com posted here for posterity. It also gives a JavaScript alert when you arrive, just to point out that I can.

[Junkenstein]

Wait a minute, who thought it was a shrewd business move to add Hulk Hogan to IT?

Success is practically guaranteed, brother.

[Pæs]

It is ridiculously tempting to make ftp.hostamania.com or similar redirect to goatse but I'm resisting the urge to tell people to register common subdomains and giving Hulk a chance to (yes, I think he personally administrates the site) to fix it.

[Junkenstein]

It is ridiculously tempting to make ftp.hostamania.com or similar redirect to goatse but I'm resisting the urge to tell people to register common subdomains and giving Hulk a chance to (yes, I think he personally administrates the site) to fix it.

I can't think of a single reason not to do this immediately.

[Mesozoic Mister Nigel]

Oh, Hulk! Like every other aging man of that generation, he went into IT, just a little after the ship sailed.

[Pæs]

They wrote back to me and explained that they coded their subdomain validator and web security in JavaScript.

Yes, the very same JavaScript that modern browsers allow you disable with a checkbox.

Like building your door out of playdough.

[Ben Shapiro]

TAKE YOUR VITAMINS AND SAY YOUR PRAYERS BROTHER!

[Anna Mae Bollocks]

They wrote back to me and explained that they coded their subdomain validator and web security in JavaScript.

Yes, the very same JavaScript that modern browsers allow you disable with a checkbox.

Like building your door out of playdough.

[Pæs]

They wrote back to me and explained that they coded their subdomain validator and web security in JavaScript.

Yes, the very same JavaScript that modern browsers allow you disable with a checkbox.

Like building your door out of playdough.

That's a popup that I added as a warning that the page was my bitch. Their JavaScript security is nowhere to be seen.