+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: A little tease (/showthread.php?tid=6208232)
A little tease - Oxycodone - Jun 5, 2022
This is a tease. But I still feel like to much info is being shown and it’s gonna backfire probably.
There’s more I wish I could show. But this was the least sensitive bit I could put together.
https://streamable.com/83plyr
RE: A little tease - linkinpork - Jun 5, 2022
(Jun 5, 2022 05:06 AM)Oxycodone Wrote: There’s more I wish I could show. But this was the least sensitive bit I could put together.
These are everywhere.
Here's another example: surfer.nmr.mgh.harvard.edu:21. Anonymous access is enabled.
If anything's going to backfire, it's probably just UPS Store threat intelligence seeing this post and changing their settings.
RE: A little tease - kumquatmus - Jun 6, 2022
Find more on some forums. Good one though. Pretty neat. Thanks
RE: A little tease - Oxycodone - Jun 6, 2022
(Jun 5, 2022 05:16 PM)linkinpork Wrote: These are everywhere.
Here's another example: surfer.nmr.mgh.harvard.edu:21. Anonymous access is enabled.
If anything's going to backfire, it's probably just UPS Store threat intelligence seeing this post and changing their settings.
This isn’t an anonymous login.
This is pertaining to dll files, patches and updates in software.
The stores connect to this service and relay information or grab files from there for patching
RE: A little tease - linkinpork - Jun 7, 2022
(Jun 6, 2022 04:06 AM)Oxycodone Wrote: The stores connect to this service and relay information or grab files from there for patching
Not bad, then. You might be able to issue a PUT command and overwrite files inside.
If they don't have a mechanism that checks for file integrity you could automatically spread a RAT and get a botnet on next patch.
RE: A little tease - Oxycodone - Jun 7, 2022
(Jun 7, 2022 08:19 AM)linkinpork Wrote: Not bad, then. You might be able to issue a PUT command and overwrite files inside.
If they don't have a mechanism that checks for file integrity you could automatically spread a RAT and get a botnet on next patch.
I can already upload and download files. I have access to every stores updates and patches.
I have a lot more then that actually I just don't wanna show everything yet.
But they haven't had a significant hack since 2014 random ware that only affected a small portion of stores.
Technically this would affect every store. In the wrong hands.
I can delete files aswell
Download. Modify. Delete and reupload.
RE: A little tease - NotKover - Jun 7, 2022
(Jun 7, 2022 10:53 AM)Oxycodone Wrote: I can already upload and download files. I have access to every stores updates and patches.
I have a lot more then that actually I just don't wanna show everything yet.
But they haven't had a significant hack since 2014 random ware that only affected a small portion of stores.
Technically this would affect every store. In the wrong hands.
I can delete files aswell
Download. Modify. Delete and reupload.
If your smart with it and have a good macro you could probably use the web page to do fake delivery invoices or something etc and probably could get a good amount of installs
EDIT: probably should delete the post so no one reports it to UPS and gets it fixed