Read the title... What i did wasnt smart, i had no protection:
no TOR, no proxy, no condom, But it hink i found a vinerability. I have access the main server page:
http://img210.imageshack.us/f/screenshotqi.png/
----edit--
i haveaccess to the admin panel login now..
----edit--
GO TO
HTTPS://CONSUMER.GOV/
I REPLACED THEIR MAIN WEBSITE WITH THE SERVER DEFAULT PAGE! W00T! W00T! W00T!
--edit--
i am not completely stupid, im only posting this becuase i know im fucked, im expecting feds to buswt thru my front door any second, so i might as well tell everyone befor i get raped by bubba, i halso have to lose my virginity to a girl QUICK so i cant say i lost it to a guy
IM GONNA STICK MEAT SPIN ON THE MAIN PAGE. IS THAT GOOD IDEA?
---edit----
http://www.fbi.gov/
I HAVE ACCESS TO THE FBI ADMIN LOGIN!!! ITS NOT VUNERABLE TO MYSQL OR XSS OR ANYTHING, MY BEST BET IS BRUTEFORCE. THEY IP BANNED ME, AND PROBS SET OUT SOME .HTACCESS TO DENALL ALL INCOMING CONNECTIONS. I HAVE TO GAN ACCESS TO A TRUSTED FBI MACHINE, AND ACCESS THIS URL:
https://www.fbi.gov:8443/vz/cp/psa/frameset
WILL KEEP YOU POSTED ON PROGRESS IF I DONT GET ARRESTED.
screenie::::
http://img814.imageshack.us/img814/7030/...shotil.png
edit
ok, so some guy claims to have told the FBI, so now im waiting for an email from the feds...
here is convo:
I say:
here
[email protected]
[email protected]
i got signed out
Vincent says:
Ok
I say:
are they hacking me?
Vincent says:
Nope
lulz
I say:
when can i expect a email?
and how fuced am i?
Vincent says:
dunno
I say:
*fucked
Vincent says:
dunno
I say:
well, i just help you turn me in...
LMAO
did u give it to them?
Vincent says:
it takes time my friend
I say:
and tell them to stop trying to log me out im not stupid
Vincent says:
im not on a live chat with them
I say:
so youre telling me youre talking with the fbi...
Vincent says:
No im not
im only saying, that they watched HF
and contacted me
in a mail
I say:
show me the mail
screenshot it
Vincent says:
I wont show contect
content
I say:
ok
stop lying to me
you fail at trolling
Vincent says:
Did i?
I say:
take a screenshot, or photograph it with a camera
and send it over
Vincent says:
well then think whatever you want...
I say:
screenshot it
i want proof
Vincent says:
then wait for them to contact you
wont take that long
I say:
orly?
yep i got an email
hold on
ok, its from [email protected], and the ip traces back to argentina.
this isnt the fbi
and this isnt funny
stop trying to be the fbi
Vincent says:
Lol
Pinkbunny?
Lulz
I say:
yes
Vincent says:
Haha
I say:
someone is fucking with me
Vincent says:
it isnt me
I say:
i.e : YOU
noone else knows that address
Vincent says:
It wasnt me
I say:
i made it 30 seconds ago
Vincent says:
I would not call me pinkbunny
and im from sweden
wanna file transfer me something and check
I say:
no
i cant
Vincent says:
Then why?
I say:
you just want my ip now
im not stupid
im still waiting for the feds...
Vincent says:
Lol
I say:
still waiting....
still waiting...
Vincent says:
you think im undercover?
lol hahah
I say:
no
youre to stupid
Vincent says:
yh
I say:
to be undercover
Vincent says:
lol
that dude fails HARD. HARDER then my erect penis... (WICH IS ROCK SOLID...)
(Sep 24, 2010 01:19 AM)bernardbear Wrote: just post screenshoot so many people will belive your job i did....
its right there..
(Sep 23, 2010 11:24 PM)codelancers Wrote: Read the title... What i did wasnt smart, i had no protection:
no TOR, no proxy, no condom, But it hink i found a vinerability. I have access the main server page:
http://img210.imageshack.us/f/screenshotqi.png/
----edit--
i haveaccess to the admin panel login now..
BACKTRACEEDD. Get under a proxy, if not 5 fool. -__-;
(Sep 24, 2010 01:40 AM)Anubis Wrote: NIce if you did it really.
But not nice if you havent been using proxy to do it :)
im uder 50 tor nodes, like 10 of em re encrypted, and on of em is my neibours wich i can incinerate...
am i safenow?
btw, im out of the feds jurisdiction, i live in canada.
Don't fuck with .GOV website's
You'll get backtraced
Nice fucking work. good job, It's a shame they might hunt your ass down. On a different note, Nice work getting in. Now your mission is to cover your fucking tracks, and get the fuck outta there. MOVE SOLDIER.
Your time starts,
now.
(Sep 24, 2010 02:19 AM)pushl %ebp Wrote: First off, in hacking there is no 'almost', there is 'you did', or 'you didn't'. The picture proves nothing; I call bullshit. Now anyone can go to here:
Code https://consumer.gov/
i'd say replacing their main web page with the server default web page is pretty good....
unless you can do better, deface them, lets see how you do it.
Start using a proxy/vpn from now, it isn't too late if you can gain root access and delete the logs.
(Sep 24, 2010 10:03 AM)Voo Wrote: Start using a proxy/vpn from now, it isn't too late if you can gain root access and delete the logs.
Sounds like pretty good solid advice to me.
(Sep 24, 2010 10:03 AM)Voo Wrote: Start using a proxy/vpn from now, it isn't too late if you can gain root access and delete the logs.
i cant gain root access, but i realised i was on my neibours hacked internet when i did it, (my wifi card connects to like 3 different depending on signal strangth) and the dude is about 2.3k away, and i deleted ALL my logs from his pc, router, ect....
am i safe? i could leave my home for about 6 months and dissapere for that time (no credit cards will be used, no anything, i will just dissaprear without a trace...)
is tha something i should consider?
Also, early this morning, i saw a ghost van infront of my house, but noone ot out or anything, or is it just my imagination?
(Sep 24, 2010 10:17 AM)Josh-Emm Wrote: Almost is simply not good enough make a thread when yeh have hacked it i replaced the default web page... i will update the title...
(Sep 24, 2010 10:15 AM)codelancers Wrote: i cant gain root access, but i realised i was on my neibours hacked internet when i did it, (my wifi card connects to like 3 different depending on signal strangth) and the dude is about 2.3k away, and i deleted ALL my logs from his pc, router, ect....
am i safe? i could leave my home for about 6 months and dissapere for that time (no credit cards will be used, no anything, i will just dissaprear without a trace...)
is tha something i should consider?
Also, early this morning, i saw a ghost van infront of my house, but noone ot out or anything, or is it just my imagination?
You haven't defaced or edited any files, have you? Just log out. They most probably won't read their logs and if they do they'll only probably change their passwords and fix the security hole.
Your too paranoid. ❓
(Sep 24, 2010 10:20 AM)Voo Wrote: You haven't defaced or edited any files, have you? Just log out. They most probably won't read their logs and if they do they'll only probably change their passwords and fix the security hole.
Your too paranoid. ❓ i replaced the index page (main page) with the server default page... look:
https://www.consumer.gov
i also reinstalled a different ssl certificate, so now the connection is untrusted...
(Sep 24, 2010 10:52 AM)Arbiter Wrote: Dude you fucked up bad. Really bad. I don't know if that site was important, but if it was... wait 'till it hits the news.
here is the admin login panel:
https://www.consumer.gov:8443/vz/cp/psa/frameset
lol try mysqli on it (not vinerable, but it gets them to trace you lulz)
LOL, you're my idol. Isn't pretty much that ''amazing'' of hacking. But, I like the fact you just hacked a .gov site without having any protection and got backtraced. And still get excited. 🤦♂
You should have defaced it though, anyway I don't think you would get arrested or anything. They'll probably just change the admin password and/or block you by MAC or IP address from their site.
|
