+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Beginner Hacking (https://hackforums.net/forumdisplay.php?fid=4)
+---- Thread: Hak5 (/showthread.php?tid=5904751)
Hak5 - luddwi - Nov 7, 2018
Hey long time lurker here deciding to contribute to the community. Going to make this as simple and easy to understand as possible.
Rubber Ducky
Spoiler (Click to View)
I will not be covering the Bash Bunny but it’s essentially a rubber ducky and lan turtle combined but not as good as having both
Network Implants
Spoiler (Click to View)
[b]Wifi Pineapple
Spoiler (Click to View)
have fun :) I plan to later on make a full in-depth guide on the wifi-pineapple so stay tuned. I hope I went over everything well if anyone doesn’t understand something Im here to help also let me know if I left anything out. peace
RE: Hak5 - ๖ۣۜCriminal - Nov 7, 2018
I have an exploit on hak5.org to pull anyones info that ordered a rubber ducky thats the ironic part about this.
RE: Hak5 - luddwi - Nov 7, 2018
(Nov 7, 2018 12:03 PM)๖ۣۜCriminal Wrote: I have an exploit on hak5.org to pull anyones info that ordered a rubber ducky thats the ironic part about this.
pm me
RE: Hak5 - biggioturbomaster - Nov 7, 2018
(Nov 7, 2018 12:03 PM)๖ۣۜCriminal Wrote: I have an exploit on hak5.org to pull anyones info that ordered a rubber ducky thats the ironic part about this.
Probably disclose it to them and if its real maybe they'll be cool about it and send you some swag? I've met Mubix and if they're all as chill as him they probably will.
RE: Hak5 - ๖ۣۜCriminal - Nov 7, 2018
(Nov 7, 2018 12:37 PM)biggioturbomaster Wrote: Probably disclose it to them and if its real maybe they'll be cool about it and send you some swag? I've met Mubix and if they're all as chill as him they probably will.
doubt it's something they'll care about it's just order enumeration but maybe it's something they will fix unsure lol it effects more then just hak5.org it's a bug in a shopify community plugin they utilize that about 3,000 stores use and I don't believe shopify themselves will care enough to payout or fix it, it's kind of complex to exploit and takes some time but discloses all info on any order.
RE: Hak5 - luddwi - Nov 7, 2018
(Nov 7, 2018 12:37 PM)biggioturbomaster Wrote: Probably disclose it to them and if its real maybe they'll be cool about it and send you some swag? I've met Mubix and if they're all as chill as him they probably will.
yea you will most likely get more money from hak5 than from selling the exploit/database
RE: Hak5 - ๖ۣۜCriminal - Nov 7, 2018
(Nov 7, 2018 12:53 PM)luddwi Wrote: yea you will most likely get more money from hak5 than from selling the exploit/database
it's not a database and it's not really an "exploit" per say I consider it more of an implementation flaw in how the shopify plugin works and you can abuse intended functionality to disclose orders because theres no rate limit you can go through tons of order number combos without much trouble, the most hak5 can do is disable it since shopify is cloud hosted, I don't believe hak5 themselves can modify the plugin to add rate limits.
RE: Hak5 - Elvira - Nov 7, 2018
i ordered a pineapple from them once. i decided to spam wifi AP's named "black people" for some reason. bricked it...... is a cool product when it works
RE: Hak5 - luddwi - Nov 7, 2018
(Nov 7, 2018 05:57 PM)Elvira Wrote: i ordered a pineapple from them once. i decided to spam wifi AP's named "black people" for some reason. bricked it...... is a cool product when it worksUnfortunate man 🤣