We started experimenting with that on several servers. We were just testing the new way of penetration (we called it RR) and rest assured, no harm was done. Surprisingly the exploit worked on every server that we tested, and as ambiguous and ethical as we are we contacted FBI about the major flaw. and they allowed us to test the exploit on one of their servers under the condition that we don't disclose anything about the RR to the public.
The exploit worked perfectly as it should on their server. FBI patched their servers for that exploit and their cybersecurity division is working on alerting other major subjects about it.
I'm sorry for not being able to tell you more details about it.
Offtopic: I heard that PMs and IRC are good ways of sharing stuff privately, what do you think?
Since FBI's servers and majority of the other critical servers were patched by now we decided to share the video of us penetrating into FBI, and a first glance on how the exploit works:
(sorry about the blurred parts, some of the data there is confidential and we cannot disclose it, at least not without some major consequences)
Props to Cats for finding the exploit, BB for allowing to test it on his servers, others for helping with coding and finding suitable servers to test the exploit on, and of course me for writing this all
Enjoy:
