Scotland Yard careers web site defaced

26/02/2008 Written by Staff

A cracker going by the han­dle of “offi­cer brobee” has defaced UK Met­ro­pol­i­tan Police’s (also known as Scot­land Yard) careers web site.

In the hacked page the defacer inserted a pic­ture of a green mon­ster fol­lowed by a text mak­ing fun of their anti-​terrorism unit, say­ing they hired incom­pe­tent peo­ple. Maybe the defacer decided to attack the site after the police refused to hire him?

Accord­ing to the mir­ror infor­ma­tions, the server host­ing the web site was run­ning Win­dows 2000 and the defacer exploited a SQL injec­tion vul­ner­a­bil­ity. Scot­land Yard — just like many orga­ni­za­tions, com­pa­nies, gov­ern­ments.. — invests mil­lions in secu­rity but for­gets that equip­ments are not enough if the web appli­ca­tion is vul­ner­a­ble to com­mon secu­rity issues…

Here is a copy of the defaced page:

OFFI­CER BROBEE SEZ: OH HAI GUYS do joo wanna bes a police­man lulz? I see that teh so15 anti-​terrorism anti-​lulz police are hir­ing more incom­pe­tent nervy edgy sociopaths to make London’s streets just that lit­tle bit safer! OH LULZ.

SHOUTS TO l0g1kal for being such a leet dude and to LULKIT­TEH for being so fancy

Mir­ror can be found here