+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: Bounties? (/showthread.php?tid=3369671)
* - Intellectual - Mar 31, 2013
(Mar 31, 2013 04:45 AM)amus3d Wrote: OKAY.
Code[12:44:59] HaxOr - #Cut4Dyme: What about
[12:45:01] HaxOr - #Cut4Dyme: Good evening.
Recently approaching your website I come to realize that there is a very explicit vulnerability within it. As a penetration tester, my duty is to keep the websites secure and I'm here to help you. Not fixing this vulnerability leaves you open to malicious hackers and puts your sites security as a risk.
If you want to keep your website safe, reply with what I'd get from this.
Good luck. -Penetration Tester
That.
You didnt write it :P
OT: Copied, pasted and sent :D
* - amus3d - Mar 31, 2013
(Mar 31, 2013 04:49 AM)Intellectual Wrote: You didnt write it :P
OT: Copied, pasted and sent :D
Wait, you've sent them an email, then sent another one - about the same vulnerability?
You're not too good at this 'white hat thing' are you.
Maybe try this:
Code
[12:51:54] HaxOr - #Cut4Dyme: Hello,
recently after discovering your website I came to realise that there is a very explicit vulnerability within it.
As a penetration tester, I feel it is my duty is to keep websites secure and I'm here to assist you in accomplishing that.
Failure to fix this vulnerability leaves you open to malicious hackers and puts not only your site's, but your users' security at risk as well.
If you wish to further secure your site, I'd like to know your reward policy regarding these types of vulnerability reports as soon as possible as a reply to this email.
Regards,
Penetration Tester.or
Code
Good evening.
Recently approaching your website I came to realize that there is an explicit vulnerability concerning it.
I'd like to notify you of its existance in order not to expose the website to any breaches that may occur.
Failure to fix this vulnerability leaves you open to blackhat hackers and puts not only your site's, but
your users' security at risk as well.
Good luck. -Penetration TesterI MADE THEM.
* - -๖ۣۜDivine- - Mar 31, 2013
(Mar 31, 2013 04:49 AM)Intellectual Wrote: You didnt write it :P
OT: Copied, pasted and sent :D
Wait what? You sent that as well? lmao
Send this too:
Code
[13:53:05] Keeper: Good evening.
Recently approaching your website I came to realize that there is an explicit vulnerability concerning it.
I'd like to notify you of its existance in order not to expose the website to any breaches that may occur.
Failure to fix this vulnerability leaves you open to blackhat hackers and puts not only your site's, but
your users' security at risk as well.
Good luck. -Penetration Tester-Made by me.
* - Intellectual - Mar 31, 2013
3 emails sent, anybody else want me 2 send their version?
* - amus3d - Mar 31, 2013
(Mar 31, 2013 04:55 AM)Intellectual Wrote: 3 emails sent, anybody else want me 2 send their version?
They seriously won't take you seriously.
You may as well steal that CC info and buy some dildos to go and fuck yourself.
* - Intellectual - Mar 31, 2013
(Mar 31, 2013 04:55 AM)amus3d Wrote: They seriously won't take you seriously.
You may as well steal that CC info and buy some dildos to go and fuck yourself.
And when I send in proof that it is vulnerable? Should I send them the dildos as well?
* - amus3d - Mar 31, 2013
(Mar 31, 2013 04:56 AM)Intellectual Wrote: And when I send in proof that it is vulnerable? Should I send them the dildos as well?
No. You should also buy a gun and kill yourself. ;3
* - Intellectual - Mar 31, 2013
(Mar 31, 2013 04:57 AM)amus3d Wrote: No. You should also buy a gun and kill yourself. ;3
Lol, but remember, I sound like a 14 year old, and im doing 'white hat stuff' so I cant legally go out and buy a gun to do so... Next option?
* - Phizo - Mar 31, 2013
(Mar 31, 2013 04:55 AM)amus3d Wrote: They seriously won't take you seriously.
You may as well steal that CC info and buy some dildos to go and fuck yourself.
This is going in my signature.
Good job.
* - -๖ۣۜDivine- - Mar 31, 2013
(Mar 31, 2013 04:58 AM)Intellectual Wrote: Lol, but remember, I sound like a 14 year old, and im doing 'white hat stuff' so I cant legally go out and buy a gun to do so... Next option?
Gently penetrate the throat with the dildo until you choke on it.
* - Intellectual - Mar 31, 2013
Everybody watch out for when I get that dildo! :59 second mark roughly...
* - amus3d - Mar 31, 2013
(Mar 31, 2013 04:58 AM)Intellectual Wrote: Lol, but remember, I sound like a 14 year old, and im doing 'white hat stuff' so I cant legally go out and buy a gun to do so... Next option?
Well, obviously you would hack yourself a fake ID - via Havij.
* - Intellectual - Mar 31, 2013
(Mar 31, 2013 05:03 AM)amus3d Wrote: Well, obviously you would hack yourself a fake ID - via Havij.
But then I would need to learn how to use Dorks or an exploit scanner like sql poizon v1.1 and I dont know how to do that...
* - gomer_py - Mar 31, 2013
I wouldn't mention anything about what you have already done.. thats will creep out most non techies..
sell me the data instead..
* - looping - Mar 31, 2013
lol i cant stop laughing after reading the thread and all comments nice thread:D