They are using a custom designed PHP backend that isn't available to the public. While they were script_kiddied by *cough*
BL4F *cough* they still had all of their directories in tact. (just proves the kid didn't even know how to "rm -rf" while he had access to root level). The kid has tried a couple other times but will deny every bit of it since he didn't succeed.
It reminds me of the many IRC sessions he pops in and out of asking what SQL means and what the difference is between that and PL_SQL (I've collected over 20 IRC logs in the past two years alone). I even remember him freaking out cause he found a quote loophole in an html form saying how "all mighty" he was. You would have thought the kid would have a half a clue by now but noooo... still trying to be a psuedo lamer. I'll be happy when I make my way down to AUS though... spend a few weeks in jail... head back to the states. Oh yeah, it will be worth it to deface his property. The point is, all the web sites that had been hacked in the past is done by the same kid.
:pint:
