[LuX98]

Nice job OP. Can you give us a figure?

[Divined]

So you reported something that was being sold by other people?
Nice, you're a great bounty hunter.

[Soldiercrimes]

The bot is checking gift card numbers and checks their balances, meaning he basically has unlimited gift cards = Free food

Dude wtf, this isn't patched at all yet. and why would it get? its just there algorithm which sucks but they cant turn that back anyhow. and if you could get free food why would you even think about telling them? most of them are small restaurants who wont pay you big time probably. and its most definitely not an exploit either.

---

So you reported something that was being sold by other people?
Nice, you're a great bounty hunter.

Yep, this is my business he is fucking with.

---

I don't understand what's happening in that gif.

Well this program is shitty coded but it makes requests to a sites gift card balance and returns the balance of most cards.

[Divined]

Yep, this is my business he is fucking with.

This is disgusting.

[mvmt]

Dude wtf, this isn't patched at all yet. and why would it get? its just there algorithm which sucks but they cant turn that back anyhow. and if you could get free food why would you even think about telling them? most of them are small restaurants who wont pay you big time probably. and its most definitely not an exploit either.

---

Yep, this is my business he is fucking with.

---

And you're fucking with the restaurant's business illegally. Do you realize how retarded you sound?

[Sexual Predator]

this is just a dick move.

if a company pays dirt cheap for a giftcard system knowing the vulnerabilities they should deal with the repercussions. Some people lived off this/were making money and you just decided to be a dick and report it.

The program works by finding sites with a giftcard system that is numerical.

For example:

Panera bread sold gift cards that looked like this:

600649161610278240240
600649161610278240241
600649161610278240242
600649161610278240243
600649161610278240244
600649161610278240245
600649161610278240246

something looks funny right? Well yeah. The last 8 digits change and are numerical, they just add +1 to the end with no pin. People use fiddler to find giftcard verification API and write a simple program to enumerate an input, such as:

6006491616102{00000000}

with {00000000} being enumerated +1 each time

so

{00000001}
{00000002}
{00000003}

with the full url it would look something like this:

Code

giftcardcheck.panerabread.com/giftcard.aspx=6006491616102{00000001}

and would return Json Value that looks like this:

Code

"id"
"giftcard=600649161610200000001"
"value=1"
"balance=$50"

and the program would just auto enumerate and run against the fiddled API with a capture and display working results or simply save to a .txt.

Just a dick move OP, you reported it and made $0. I know this because I reported a similar bug back in 2014 for a site i discovered, i wont disclose which restaurant. But it was pretty big. They didn't pay anything.


also edit,

op quote:

I found an exploit in 200k+ restaurant brands and reported it along with this tool for them to patch. Pretty cool? Yes no?

you didn't find a fucking exploit you prick, you found someone selling a tool/giving it out for free, then reported it.

It's like saying you discovered a "ebook method" when all you did was buy the ebook.
You just reported someone elses code because you're a jealous prick.

[Amp]

You could've made a lot of money with this, not sure why you didn't.

[Sexual Predator]

"Just a dick move OP, you reported it and made $0. I know this because I reported a similar bug back in 2014 for a site i discovered, i wont disclose which restaurant. But it was pretty big. They didn't pay anything. "

Didn't you just admit that you did the same? Lmao, idiot. You would have all done it, now you're all talking shit. Grow up.
You're doing something fucking illegal and there's nothing moral about earning a living from a company's loss. (that company also has to pay it's employees)
The guy that's complaining your trashing his business, sure. You are, but he can't talk shit to you about it when he's the thief.

Although I do agree this threads completely pointless and the OP did nothing special.
Doesn't give you a right to shit talk him because "YOU" are jealous though.

---

This.

if you took two seconds to read the entire quote rather than jump on the fact that you wanna shit talk, i'd like to point out two things

1) "Just a dick move OP, you reported it and made $0. I know this because I reported a similar bug back in 2014 for a site i discovered, i wont disclose which restaurant. But it was pretty big. They didn't pay anything"

It was a chain restaurant i found the vulnerability too, i didn't release it publicly, and i reported it as part of the bug bounty phase i was going through. OP reported a tool that he brought/cracked, didn't discover it on his own. Idiot.

2) "You're doing something fucking illegal and there's nothing moral"

I'd like to point out this:

You're on a website called "hackforums" were there is a whole section dedicated to doxing, another dedicated to ratting and botnets, that's ethical? Go back to tumblr and write posts about how you're a moral and righteous human being. This whole site is for greyhat/borderline blackhat activity. Why even bring up morals / ethics you retard.

I'd like to then take the time to call you out, since doing something "illegal" is Baaaad :)

1) https://hackforums.net/showthread.php?tid=5803094 You're selling a runescape account, directly against their TOS. Making it illegal.
2) https://hackforums.net/showthread.php?tid=5776848 You're buying RSGP, Directly against TOS on Real World trading. Making it illegal.
3) https://hackforums.net/showthread.php?tid=5473341 Attempting to hire developers for an illegal gambling site targeting minors. Making it illegal
4) https://hackforums.net/showthread.php?tid=5283287 Attempting to give our free credits to your shitty gambling site to kids in order to get them hooked. Making it illegal.
5) https://hackforums.net/showthread.php?tid=5254507 Attempting to buy Amazon GC's, which is against TOS. Probably knowing they're carded. Making it illegal.


And are you ready for the final and big blow?

You posted your skype "create.134"

Here:

https://hackforums.net/showthread.php?tid=5174090

You then posted on reddit including your skype

Here:

https://www.reddit.com/r/SteamBotMarket/...egotiable/

clicking on your profile here: https://www.reddit.com/user/Jacerns

shows you clearly bragging about using #, depositing money, buying drugs, and withdrawing the money. From a DarknetMarket that was seized by the FBI.

https://www.reddit.com/r/DarkNetMarkets/...g/d9z9uri/
https://www.reddit.com/r/DarkNetMarkets/...c/dahrlqb/
https://www.reddit.com/r/DarkNetMarkets/...habay_bug/

dont come at me about what's illegal and what's not, kid.

tl;dr, heres a shitpost meme :D

[Soldiercrimes]

if you took two seconds to read the entire quote rather than jump on the fact that you wanna shit talk, i'd like to point out two things

1) "Just a dick move OP, you reported it and made $0. I know this because I reported a similar bug back in 2014 for a site i discovered, i wont disclose which restaurant. But it was pretty big. They didn't pay anything"

It was a chain restaurant i found the vulnerability too, i didn't release it publicly, and i reported it as part of the bug bounty phase i was going through. OP reported a tool that he brought/cracked, didn't discover it on his own. Idiot.

2) "You're doing something fucking illegal and there's nothing moral"

I'd like to point out this:

You're on a website called "hackforums" were there is a whole section dedicated to doxing, another dedicated to ratting and botnets, that's ethical? Go back to tumblr and write posts about how you're a moral and righteous human being. This whole site is for greyhat/borderline blackhat activity. Why even bring up morals / ethics you retard.

I'd like to then take the time to call you out, since doing something "illegal" is Baaaad :)

1) https://hackforums.net/showthread.php?tid=5803094 You're selling a runescape account, directly against their TOS. Making it illegal.
2) https://hackforums.net/showthread.php?tid=5776848 You're buying RSGP, Directly against TOS on Real World trading. Making it illegal.
3) https://hackforums.net/showthread.php?tid=5473341 Attempting to hire developers for an illegal gambling site targeting minors. Making it illegal
4) https://hackforums.net/showthread.php?tid=5283287 Attempting to give our free credits to your shitty gambling site to kids in order to get them hooked. Making it illegal.
5) https://hackforums.net/showthread.php?tid=5254507 Attempting to buy Amazon GC's, which is against TOS. Probably knowing they're carded. Making it illegal.


And are you ready for the final and big blow?

You posted your skype "create.134"

Here:

https://hackforums.net/showthread.php?tid=5174090

You then posted on reddit including your skype

Here:

https://www.reddit.com/r/SteamBotMarket/...egotiable/

clicking on your profile here: https://www.reddit.com/user/Jacerns

shows you clearly bragging about using #, depositing money, buying drugs, and withdrawing the money. From a DarknetMarket that was seized by the FBI.

https://www.reddit.com/r/DarkNetMarkets/...g/d9z9uri/
https://www.reddit.com/r/DarkNetMarkets/...c/dahrlqb/
https://www.reddit.com/r/DarkNetMarkets/...habay_bug/

dont come at me about what's illegal and what's not, kid.

tl;dr, heres a shitpost meme :D

Good fucking post dude hahaha im laughing at this!

---

And you're fucking with the restaurant's business illegally. Do you realize how retarded you sound?

So you are on a "hacking" forum and see like 30% of the posts here are about vulns, rats, crypting and all those things and are still complaining about just a tool that lets people eat for free?

Go ahead then.

[mvmt]

Good fucking post dude hahaha im laughing at this!

---

So you are on a "hacking" forum and see like 30% of the posts here are about vulns, rats, crypting and all those things and are still complaining about just a tool that lets people eat for free?

Go ahead then.

That makes no fucking sense.

"You use the internet and people do bad things on the internet so you're a bad person too"

[Zhyper]

amazing, good luck with the price bro

[GodlessOlympian]

if you took two seconds to read the entire quote rather than jump on the fact that you wanna shit talk, i'd like to point out two things

1) "Just a dick move OP, you reported it and made $0. I know this because I reported a similar bug back in 2014 for a site i discovered, i wont disclose which restaurant. But it was pretty big. They didn't pay anything"

It was a chain restaurant i found the vulnerability too, i didn't release it publicly, and i reported it as part of the bug bounty phase i was going through. OP reported a tool that he brought/cracked, didn't discover it on his own. Idiot.

2) "You're doing something fucking illegal and there's nothing moral"

I'd like to point out this:

You're on a website called "hackforums" were there is a whole section dedicated to doxing, another dedicated to ratting and botnets, that's ethical? Go back to tumblr and write posts about how you're a moral and righteous human being. This whole site is for greyhat/borderline blackhat activity. Why even bring up morals / ethics you retard.

I'd like to then take the time to call you out, since doing something "illegal" is Baaaad :)

1) https://hackforums.net/showthread.php?tid=5803094 You're selling a runescape account, directly against their TOS. Making it illegal.
2) https://hackforums.net/showthread.php?tid=5776848 You're buying RSGP, Directly against TOS on Real World trading. Making it illegal.
3) https://hackforums.net/showthread.php?tid=5473341 Attempting to hire developers for an illegal gambling site targeting minors. Making it illegal
4) https://hackforums.net/showthread.php?tid=5283287 Attempting to give our free credits to your shitty gambling site to kids in order to get them hooked. Making it illegal.
5) https://hackforums.net/showthread.php?tid=5254507 Attempting to buy Amazon GC's, which is against TOS. Probably knowing they're carded. Making it illegal.


And are you ready for the final and big blow?

You posted your skype "create.134"

Here:

https://hackforums.net/showthread.php?tid=5174090

You then posted on reddit including your skype

Here:

https://www.reddit.com/r/SteamBotMarket/...egotiable/

clicking on your profile here: https://www.reddit.com/user/Jacerns

shows you clearly bragging about using #, depositing money, buying drugs, and withdrawing the money. From a DarknetMarket that was seized by the FBI.

https://www.reddit.com/r/DarkNetMarkets/...g/d9z9uri/
https://www.reddit.com/r/DarkNetMarkets/...c/dahrlqb/
https://www.reddit.com/r/DarkNetMarkets/...habay_bug/

dont come at me about what's illegal and what's not, kid.

tl;dr, heres a shitpost meme :D

This was gold! Couldn't have been better. As for OP, I think it was noble but pointless. I'd probably be guilty of keeping that kind of a system to myself to use whenever I'm too broke to buy some food because I dumped all my cash into crypto and am holding. lol

[Bossk]

wtf is happening tho this thread

[b1g baimer]

if you took two seconds to read the entire quote rather than jump on the fact that you wanna shit talk, i'd like to point out two things

1) "Just a dick move OP, you reported it and made $0. I know this because I reported a similar bug back in 2014 for a site i discovered, i wont disclose which restaurant. But it was pretty big. They didn't pay anything"

It was a chain restaurant i found the vulnerability too, i didn't release it publicly, and i reported it as part of the bug bounty phase i was going through. OP reported a tool that he brought/cracked, didn't discover it on his own. Idiot.

2) "You're doing something fucking illegal and there's nothing moral"

I'd like to point out this:

You're on a website called "hackforums" were there is a whole section dedicated to doxing, another dedicated to ratting and botnets, that's ethical? Go back to tumblr and write posts about how you're a moral and righteous human being. This whole site is for greyhat/borderline blackhat activity. Why even bring up morals / ethics you retard.

I'd like to then take the time to call you out, since doing something "illegal" is Baaaad :)

1) https://hackforums.net/showthread.php?tid=5803094 You're selling a runescape account, directly against their TOS. Making it illegal.
2) https://hackforums.net/showthread.php?tid=5776848 You're buying RSGP, Directly against TOS on Real World trading. Making it illegal.
3) https://hackforums.net/showthread.php?tid=5473341 Attempting to hire developers for an illegal gambling site targeting minors. Making it illegal
4) https://hackforums.net/showthread.php?tid=5283287 Attempting to give our free credits to your shitty gambling site to kids in order to get them hooked. Making it illegal.
5) https://hackforums.net/showthread.php?tid=5254507 Attempting to buy Amazon GC's, which is against TOS. Probably knowing they're carded. Making it illegal.


And are you ready for the final and big blow?

You posted your skype "create.134"

Here:

https://hackforums.net/showthread.php?tid=5174090

You then posted on reddit including your skype

Here:

https://www.reddit.com/r/SteamBotMarket/...egotiable/

clicking on your profile here: https://www.reddit.com/user/Jacerns

shows you clearly bragging about using #, depositing money, buying drugs, and withdrawing the money. From a DarknetMarket that was seized by the FBI.

https://www.reddit.com/r/DarkNetMarkets/...g/d9z9uri/
https://www.reddit.com/r/DarkNetMarkets/...c/dahrlqb/
https://www.reddit.com/r/DarkNetMarkets/...habay_bug/

dont come at me about what's illegal and what's not, kid.

tl;dr, heres a shitpost meme :D

well this is a great fucking post, fuck that loser

[FiftyTwo]

*insert expose quote here*

Shit man, good work.
Love the meme at the end hehe.