+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: [Solved] Need help gaining access to intranet of major ISP (/showthread.php?tid=5339418)
[Solved] Need help gaining access to intranet of major ISP - nqzdepofltr - Jul 15, 2016
Hello,
I found a method to gain access to any employee account (billing and management systems) on a major ISP. Only problem is that this error message is displayed when I try to login:
"Your current role restricts login from Internet. Please use the Intranet URL to login to the application"
Anyone who knows what they're doing and wants to try and help me, please PM
I already found numerous problems with their site so perhaps there is another way in
* - Sirental - Jul 15, 2016
Hahahah, You should give them a call and tell them about the vulnerbility so they can fix it and who knows maby you get paid for helping. =))
* - johnarrow123 - Jul 15, 2016
(Jul 15, 2016 10:22 AM)Sirental Wrote: Hahahah, You should give them a call and tell them about the vulnerbility so they can fix it and who knows maby you get paid for helping. =))
#FuckBugBounties
* - BlackHair - Jul 15, 2016
(Jul 15, 2016 10:42 AM)johnarrow123 Wrote: #FuckBugBounties
#BugBountiesYesPlease
* - TreaZon - Jul 15, 2016
PM me. I can help.
This is easy, and I've done it before.
* - Xorus - Jul 15, 2016
Always be careful about reporting bugs like that to companies even if they have a bug bounty program. There have been people who have tried to report bugs with good intention, but have been met with threats of legal action. A good example would be the Starbucks Giftcard Hacker: http://sakurity.com/blog/2015/05/21/starbucks.html Make sure if you are reporting it through a bug bounty program that your tests do NOT include anything that could fall outside their limitations and terms.
* - nqzdepofltr - Jul 15, 2016
I'm not really concerned about legal action as I live in a country outside of the United States
And I also solved it, Turns out that I need to login from the same IP range that the ISP uses.