+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: [vulnerable info]fbo.gov[vulnerable] help !? (/showthread.php?tid=1104589)
Pages: Pages
1
2
[vulnerable info]fbo.gov[vulnerable] help !? - CyberM@X - Mar 3, 2011
Well I was sniffing around a bit and figured out to find a lot of emails & might vulnerable information which is restricted 👹
Here you see a photo ...
Tell me what you mean ... 😧
[img]http://img5.imageshack.us/img5/7261/vuln1.jpg[/img]
Am I getting into problems by this :S - it's kinda a federal website 😏
Regards, 🎉
* - Fafaffy - Mar 3, 2011
(Mar 3, 2011 06:21 AM)Mr.Suxi Wrote: Well I was sniffing around a bit and figured out to find a lot of emails & might vulnerable information which is restricted 👹I would email them about the security risk, you may be rewarded for it.
Here you see a photo ...
Tell me what you mean ... 😧
[img]http://img5.imageshack.us/img5/7261/vuln1.jpg[/img]
Am I getting into problems by this :S - it's kinda a federal website 😏
Regards, 🎉
* - PyScHo.HacKer - Mar 3, 2011
(Mar 3, 2011 06:21 AM)Mr.Suxi Wrote: Well I was sniffing around a bit and figured out to find a lot of emails & might vulnerable information which is restricted 👹
Here you see a photo ...
Tell me what you mean ... 😧
[img]http://img5.imageshack.us/img5/7261/vuln1.jpg[/img]
Am I getting into problems by this :S - it's kinda a federal website 😏
Regards, 🎉
bro which HP lappy series it is..
* - Elyfean - Mar 3, 2011
Yes, email them, you'll have a reward ;)
But.
Bad or Good reward ? =/
* - CyberM@X - Mar 3, 2011
haha well - thanks :) ... I might consider it :) ..
* - SIM-209986 - Mar 3, 2011
It looks like a Feed? :/
* - CyberM@X - Mar 3, 2011
(Mar 3, 2011 08:31 AM)ShadowNET Wrote: It looks like a Feed? :/
Well I don't know really ... just sniffing around as told ! :) - I emailed the mil , to tell them I found this vuln. point .. hoping on something good !
But one thing I know is that this should not been on public 😎
* - Novakane - Mar 3, 2011
reward?! lol hope they dont bust you!
* - Ally Mac - Mar 3, 2011
(Mar 3, 2011 09:37 AM)Novakane Wrote: reward?! lol hope they dont bust you!
Many people get paid to do this, they will not arrest him, they will thank him.
~A
* - イᴇᴙᴙᴉᴅᴀᶍ - Mar 3, 2011
(Mar 3, 2011 09:39 AM)Ally Mac Wrote: Many people get paid to do this, they will not arrest him, they will thank him.
~A
Yeah, but if you pay someone to do it, you're giving them permission and you'd know that they are gonna be pentesting it.
I've had quite a few people threaten to call the cops on me after I told them that there website is vulnerable. Even though you're helping them out, most people don't like it when you go snooping around through their stuff behind their back.
* - Hattrickgamer - Mar 3, 2011
You're not going to get arrested for this,
I've emailed the Swedish police when they had some Vulns on their Site,
They thanked me,
Might be because my Grandfather and my Uncle works in the Swedish Police force.
Oh lord.
* - CyberM@X - Mar 3, 2011
haha yeah thanks .. just hope I won't get into trouble for this penetrate :) ... I'm hoping for the best !!
Hack the planet ! <3
* - Ir00tstuff - Mar 3, 2011
Just first email them ; If I can find any vurnability's on your website and report them to you , Do I get in trouble trough a proxy / VPN btw
* - Hattrickgamer - Mar 3, 2011
They will be able to track you even though you use a VPN, because of their advanced techniques.
* - Breaking Sun - Mar 3, 2011
I'd really like to hear what they said to you...
I found a vulnerability in paypal and reported it to them, but it was difficult because there was no designated "report a security flaw" etc. contact.
I contacted them via some other "security concerns" contact and they replied basically just saying
"Thank you for bringing this up, i will forward it to the appropriate department."
Took them a week or so but the vuln is fixed now.
No reward, just a 'thanks'.
I believe this is what is going to happen to you, but at least you get some recognition...
Oh and well done on actually finding the emails and info btw 🙂