Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact

A little tease

This is a tease. But I still feel like to much info is being shown and it’s gonna backfire probably.

There’s more I wish I could show. But this was the least sensitive bit I could put together.

https://streamable.com/83plyr
(Jun 5, 2022 05:06 AM)Oxycodone Wrote:  There’s more I wish I could show. But this was the least sensitive bit I could put together.


These are everywhere.

Here's another example: surfer.nmr.mgh.harvard.edu:21. Anonymous access is enabled.

If anything's going to backfire, it's probably just UPS Store threat intelligence seeing this post and changing their settings.
Regards,
Porky
ℒ𝒶𝓊ℊ𝒽𝒾𝓃ℊ 𝒶𝓉 𝓎ℴ𝓊𝓇 𝓈ℯ𝒸𝓊𝓇𝒾𝓉𝓎 𝓈𝒾𝓃𝒸ℯ... ℯ𝓋ℯ𝓇.
Find more on some forums. Good one though. Pretty neat. Thanks
(Jun 5, 2022 05:16 PM)linkinpork Wrote:  These are everywhere.

Here's another example: surfer.nmr.mgh.harvard.edu:21. Anonymous access is enabled.

If anything's going to backfire, it's probably just UPS Store threat intelligence seeing this post and changing their settings.

This isn’t an anonymous login.

This is pertaining to dll files, patches and updates in software.

The stores connect to this service and relay information or grab files from there for patching
(Jun 6, 2022 04:06 AM)Oxycodone Wrote:  The stores connect to this service and relay information or grab files from there for patching



Not bad, then. You might be able to issue a PUT command and overwrite files inside.

If they don't have a mechanism that checks for file integrity you could automatically spread a RAT and get a botnet on next patch.
Regards,
Porky
ℒ𝒶𝓊ℊ𝒽𝒾𝓃ℊ 𝒶𝓉 𝓎ℴ𝓊𝓇 𝓈ℯ𝒸𝓊𝓇𝒾𝓉𝓎 𝓈𝒾𝓃𝒸ℯ... ℯ𝓋ℯ𝓇.
(Jun 7, 2022 08:19 AM)linkinpork Wrote:  Not bad, then. You might be able to issue a PUT command and overwrite files inside.

If they don't have a mechanism that checks for file integrity you could automatically spread a RAT and get a botnet on next patch.

I can already upload and download files. I have access to every stores updates and patches.

I have a lot more then that actually I just don't wanna show everything yet.

But they haven't had a significant hack since 2014 random ware that only affected a small portion of stores.

Technically this would affect every store. In the wrong hands.

I can delete files aswell

Download. Modify. Delete and reupload.
(Jun 7, 2022 10:53 AM)Oxycodone Wrote:  I can already upload and download files. I have access to every stores updates and patches.

I have a lot more then that actually I just don't wanna show everything yet.

But they haven't had a significant hack since 2014 random ware that only affected a small portion of stores.

Technically this would affect every store. In the wrong hands.

I can delete files aswell

Download. Modify. Delete and reupload.

If your smart with it and have a good macro you could probably use the web page to do fake delivery invoices or something etc and probably could get a good amount of installs

EDIT: probably should delete the post so no one reports it to UPS and gets it fixed