Hack Forums
Vulnerabilities on online casino websites - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: Vulnerabilities on online casino websites (/showthread.php?tid=4516523)



Vulnerabilities on online casino websites - Stusders - Oct 31, 2014

Not wanting to go into too much detail but I've managed to find a pretty major vulnerability on a casino site regarding it's client to server scripting. If anyone knows any more online casinos that allow for this exploit then please PM me.

Edit: Little more detail - I can change values of the dealer's face-up card on games like blackjack. There are exploits for all games I'm sure but I'm slowly working them out. It's not a 100% way to win but it definitely tips the odds in your favor A LOT.

Edit 2: I may need help with this. PM if interested but you need to be persistent testing sites.

Edit 3: No longer taking on help for this project so please do not PM me.


* - Fiora - Oct 31, 2014

I would report it to the web master or be black hat and use it for fun ;D


* - Stusders - Oct 31, 2014

(Oct 31, 2014 06:07 PM)Pƨɣƈɦơ Mʌɲƭɪƨ Wrote:  I would report it to the web master or be black hat and use it for fun ;D

Definitely no way I'm reporting this. Especially on the sites that allow crypto currency.


* - Shiroe - Oct 31, 2014

lel if i was you i would get all payment info if there is any.Or tell the webmaster for money


* - Impervious. - Oct 31, 2014

(Oct 31, 2014 06:18 PM)Stusders Wrote:  Definitely no way I'm reporting this. Especially on the sites that allow crypto currency.

Abuse it for a nice capital for yourself(through VPN and all that), don't be too greedy though. Then you could still report it.


* - Stusders - Oct 31, 2014

I may need help with this. PM if interested but you need to be persistent testing sites.