Hack Forums
[PerniciousDevs] White-Box & Black-Box Website support - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: [PerniciousDevs] White-Box & Black-Box Website support (/showthread.php?tid=4131037)



[PerniciousDevs] White-Box & Black-Box Website support - Th3PonyWizard - Mar 23, 2014

[Image: eewDbqu.png]
Group Recruitment thread

Hi. I'm making this free service to help back to some of the sysadmins around here. This thread might move sections because I've yet to decide what's the best suited section to it: WaF, Website construction, or even White-Hat Help.
Anyways for now it's here. We're basically offering to scan your website for any weak programming that may be dangerous.

Our team is highly skilled in the world of the Web Application, we know how to handle all 3 Tiers of this field: Client sided, Server sided down to DBMS.
As a bonus, we can provide a basic pentest scan to your box to check of any non-direct vulnerabilities. Just keep in mind you are required to provide us solid proof of you owning the URL you're giving us by uploading a statement to it somewhere allowing us to touch it.
This is a legitimate service made for legitimate website developers, beginners and experienced devs alike.

Without further text, our team:
Goodies - Server sided
HeXagone - Web
Nessuno - Server, Web
Zymtom - Web
Pony - Web
More are working off the light.

Form:
Quote:Index URL:
Proof of ownership: (Link to file with statement of legal allowance)
Notes(optional):


We're not hacking your targets.




* - cyberducky - Mar 23, 2014

Even though I am more of a student within the team, I am willing to assist when all slots are filled with requests.


* - Eternal. - Mar 23, 2014

Vouch for Th3PonyWizard he knows his shit. Great service!


* - Cathal - Mar 23, 2014

You might wanna add you cannot perform server audits in a shared-hosting environment, as that can only be authorized by the host themselves.
If it means anything, I also vouch for this team. I have only good things to say about them.

Also, I might avail of this service in the near future regarding a forum a friend of mine has developed from scratch.


* - jamie45 - Mar 23, 2014

Wondering why this thread is only rated 2 stars, seems like a HQ service. Keep it up.


* - Th3PonyWizard - Mar 23, 2014

(Mar 23, 2014 01:48 PM)Cathal Wrote:  You might wanna add you cannot perform server audits in a shared-hosting environment, as that can only be authorized by the host themselves.
If it means anything, I also vouch for this team. I have only good things to say about them.

Also, I might avail of this service in the near future regarding a forum a friend of mine has developed from scratch.
Thanks, that's a valid point indeed.


* - sp3ctrum - Mar 24, 2014

I Vouch for this group of guys here. Pony knows his shit when it comes to a web app, use to mod Z+ with Hex and was always interested in his concepts. The rest of the team is exceptionally good in their fields as well. Might have to put in an app for this squad :3

Good luck guys,Klimax


* - Free ZeeKill - Mar 24, 2014

Just pointing this out

"Client sided, Server sided down to DBMS."

Technically isn't the DBMS just apart of the server side? No real reason to put it in there. Or you could even put it in the client side if you get it via SQLi


* - Th3PonyWizard - Mar 24, 2014

(Mar 24, 2014 05:31 AM)Free ZeeKill Wrote:  Just pointing this out

"Client sided, Server sided down to DBMS."

Technically isn't the DBMS just apart of the server side? No real reason to put it in there. Or you could even put it in the client side if you get it via SQLi
Technically - Yes. De facto - Nope, arguable. This is an official split of how websites layer themselves in terms of development.
http://en.wikipedia.org/wiki/Multitier_architecture#Web_development_usage:-


* - Snowl - Mar 24, 2014

Really excited to see this thread. It looks like you and your team have what it takes to get the job done with all your experience put together.

Index URL: http://www.leakbin.net
Proof of ownership:
Code
https://i.gyazo.com/3a66f81ca4f43a52e341d71cb208fcd4.png
https://gyazo.com/27ef0b15e0720754dd6277c6a73f5b5c
Notes: I'm on a shared server right now so there isn't much to be done server side. I really would just like a complete overview of most of my code on FTP and research vulnerabilities that could be in any plugins, PHP, etc. I would like to get this quick overview started as soon as possible so that I can get back online. In my Proof of ownership for the first screenshot that shows that I'm logged in + the message says 'Your' board is closed. I'm signed in as the primary administrator, and I can give you some more screenshots if needed. As you and your team are very trusted here on HF I'm willing to passover any account credentials needed for you to work with. I also don't have 25 posts so I can not contact through PM, so if you would like you can email me. Thanks so much!!

[email protected]


* - Th3PonyWizard - Mar 25, 2014

(Mar 24, 2014 12:15 PM)Snowl Wrote:  Really excited to see this thread. It looks like you and your team have what it takes to get the job done with all your experience put together.

Index URL: http://www.leakbin.net
Proof of ownership:
Code
https://i.gyazo.com/3a66f81ca4f43a52e341d71cb208fcd4.png
https://gyazo.com/27ef0b15e0720754dd6277c6a73f5b5c
Notes: I'm on a shared server right now so there isn't much to be done server side. I really would just like a complete overview of most of my code on FTP and research vulnerabilities that could be in any plugins, PHP, etc. I would like to get this quick overview started as soon as possible so that I can get back online. In my Proof of ownership for the first screenshot that shows that I'm logged in + the message says 'Your' board is closed. I'm signed in as the primary administrator, and I can give you some more screenshots if needed. As you and your team are very trusted here on HF I'm willing to passover any account credentials needed for you to work with. I also don't have 25 posts so I can not contact through PM, so if you would like you can email me. Thanks so much!!

[email protected]
[Image: fCI7ilV.png]
Is that true?


* - SIM-1073426 - Mar 25, 2014

I would be interested in this service and can provide whatever proof you need that I own the server. However I don't feel comfortable posting the link here. Is there any chance I can provide it via PM?


* - Th3PonyWizard - Mar 25, 2014

(Mar 25, 2014 03:30 AM)Aces. Wrote:  I would be interested in this service and can provide whatever proof you need that I own the server. However I don't feel comfortable posting the link here. Is there any chance I can provide it via PM?
Yeah sure, go for it.
s, s, s.s, s, s.


* - Snowl - Mar 25, 2014

(Mar 25, 2014 02:30 AM)Th3PonyWizard Wrote:  [Image: fCI7ilV.png]
Is that true?

That's right, however date first seen wasn't in January.


* - Th3PonyWizard - Mar 25, 2014

(Mar 25, 2014 10:10 AM)Snowl Wrote:  That's right, however date first seen wasn't in January.
Yeah, forget about it. I have better stuff to do.