[ophb]

Hi,

I need to get access to some pdf files (exams). Those pdf-files are stored on the professor's (+ teaching assistant's) computer and probably also in his email-account.

What would be the best way to access those files. Is there a FUD Java drive-by? (I would also pay up to 200-500€ to get access to these files).

Thanks!

[ophb]

The thing is, I don't have physical access to his computer. I have his email address (and the one of this teaching assistant). I need to infect him through email. So RAT is probably a good way, but don't you think university firewall will block the ports? Are there any RAT's through http?

[ophb]

Why don't you try to crack email password ? It's worth to try before you pay for JDB

mainly because it's not a normal email-provider, but the university's email, which probably is hard to crack.

I also have his facebook and skype nick if that helps...

What is the least suspecious way to make him open the infected file. I mean, what file types are possible to infect him with? He probably won't open a file called "innocent.exe" ;)

Btw, I would also pay someone, if anybody would like to do it for me :)

[ophb]

You can use spooofer for win7 but if he's using xp these are the ones I know and he might open them
.scr .bat .pif

Thanks - sounds good. I'm afraid I won't be able to do it on my own within the next hours.
So if anyone can access the files for me, I will pay 150€-400€ :) So if you are looking for a job, let me know (will be offline the next 7 hours, but send me a PM). Deadline is Monday 15:00 CES.

[Maghbool]

Hi, since you have his email you can Social Engineer your way into it and once you get access into his email it may have information leading to his teachers panel which you can use to edit grades or you can attempt to infect him by sending him fake advertisements.

I highly discourage you to do this, as the result may get you in jail and expelled. Which will ruin your life.
Plus he can easily check who's grade was changed, at what time and what time his email was token.
Especially since your cheating on a exam, hacking and many other illegal things this isn't a good idea so rethink your actions.

[ophb]

LOL, instead of paying 500 for those files, why not buy a FUD crypter for 20 dollars, crypt a RAT and RAT the professor's computer to get access to his emails? There are lots of tutorials on HF to do this, use the search function.

I'm not paying 500€ for the RATs, but for the whole job ;)
I don't have the time to read myself into the topic and work through tutorials, as I'm also studying for the exam at the same time. So if someone can take over the whole job and access the exam files, I would pay about 200€ for these files (+additional 200€ for other similiar files).

[Basics.]

Why not study and actually have the satisfaction of passing knowing that you put a lot of work into it?

[outlaw_mak]

just send him a cryped rat bound to a file on a CD saying you have pics of him sleeping with a hooker or something send it via ups so he signs for it and shoves it into his computer then wait at a terminal in the library and transfer the files to media fire view when and at your pleasure even a good keylogger will get all his passwords.

failing the above sleep with his daughter and ask her for a favor ;)

[mrmodest]

If anyone else is up to help out with the same sort of thing, I would also be willing to pay for this. Do you know of any good ways of obtaining a Gmail password?

[Hitchhiker]

I would make your server have a USB spreadable attribute, when he gets up or w/e,
pop the baby into his pc for a few seconds and he should connect to your rat server.

How would one do this? Any tutorials for this?

[Riemann]

Hello,

I am writing because I need your help! I am a newbie in the hacker world but I would like to learn a bit more from this forum really great! I'm trying to enter the site from my school, but I have a problem ... First of all let me explain what I did in order to correct my mistakes! As first time I tried to enter the space username: admin and I used FireForce to find the password by brute force, but to me it only works with gmail! (Tiscali, Virgil, etc ... will not let me open FireForce while yahoo I have already tried with javascript!). Since brute force was not thought to use SQL injection although we do not know much about SQL or XSS but you list the steps I made to have your comments and suggestions:

1) I copied the URL of the login page of my school because I want to get in as an administrator to change the votes and make changes to some friends! the page is as follows: http://portalestudente.uniroma3.it/index.php?p=accedi

2) I have entered the URL in Acunetix hoping that there were vulnerabilities but do not know very well analyze the data! so I entered the URL in Havij asking the program to search for the administrator ... at the end Havij told me that the page administrator should be: http://portalestudente.uniroma3.it/index...ratorlogin

3) Then I reinserted this URL: http://portalestudente.uniroma3.it/index...ratorlogin in looking Acunetix vulnerability. The program has found vulnerability but did not give me the page "Admin".

4) I entered anyway this URL: http://portalestudente.uniroma3.it/index...ratorlogin in Havij but it tells me that the page is not vulnerable! (With "INTEGER" at the top right ...)

Explanation map now I'm in trouble because if the site is vulnerable to hacking and I do not know if it is vulnerable around I do not know! Who can help me? How do I get the username and password of the administrator? Please help me it is urgent ...

Thank you very much!

Phili

[Riemann]

Hi Prodigal,

thank you! This URL is what I enter in Havij?

---

because I put your URL in Havij but does not give me neither username nor password is not because the columns! I do not know how ... could you give me a hand?