[Ascendon]

Hello HF. II will be awake for most of the night until morning.
HeXagone wants to help so either pm me or him and we can both do as much as we can!!

I can scan your specified website for vulnerabilities both manually and automatically.
Exclusive sites that are Governmental (.gov), Educational (.edu), or Military (.mil) or high profile (example: elitepvpers.com, worldofwarcraft.com etc.) will be ignored unless interrogated relevantly for a specific cause in which we should agree.

No application that involves hacking relatively big sites like World of War Craft and Other stuff.
Application will be denied if the request is posted twice or more
A member can post a max of 2 requests.
Members will be completely ignored if they don't follow or read the rules.
A decent reputation
A couple of active posts
A few contributions to the community
A relative reason should be given, otherwise application will be ignored

We can Try to:
1) SQLI (Typical)
2) XSS (not very useful)
3) LFI (Rare)
4) RFI (Rarest)
5) Shell (Unlikely)
6) Ddos (If you ask for this then Burn..)
7) CSRF (Common)

First of all you have to fill out a form of why this site needs to be punished.

Code

Url:
Reason:
Is the above reason true?:
Option of attack (You can pick more than 1 if there is many types of vulnerabilities):

Either post or pm me the filled out code. If you post it might be an invasion of privacy I'm not sure.

Love you all <3 👍

[HeXagone]

Can i join i'm bored too ?

HeXagone

[Ascendon]

Can i join i'm bored too ?

HeXagone

Yeah sure I will edit the thread for you.

---

Anyone interested in this free service?

[RyanH]

Url: https://sbir2.st.dhs.gov/
Reason: because I'm bored
Is the above reason true?: of course
Option of attack (You can pick more than 1 if there is many types of vulnerabilities): I'm fairly confident that a professional hacker such as you will be able to gain a shell in a matter of minutes.

[amg64]

Nice service, just pm you for a specified site.

[syber33]

๖ۣۜAscendon can you give me your skype name?

[Ascendon]

Yeah sure I will pm you it to you now.

[Jysticim]

Url: www.merletcollege.nl
Reason: So I work at the ICT of a school and they asked me to check if there is any vulnerability on the site. We just launched a new website and we want to see if it is a bit solid. I was invited as an outsider of the project and I need to check if there is any vulnerability. I tried to search but only could find the admin login page so I think it is pretty safe. Now I want to know what you think of the safety.
Is the above reason true?: Yes ofcourse.
Option of attack (You can pick more than 1 if there is many types of vulnerabilities): Just look if the website is solid.

Thanks in advance, Jysticim

[Ascendon]

Url: www.merletcollege.nl
Reason: So I work at the ICT of a school and they asked me to check if there is any vulnerability on the site. We just launched a new website and we want to see if it is a bit solid. I was invited as an outsider of the project and I need to check if there is any vulnerability. I tried to search but only could find the admin login page so I think it is pretty safe. Now I want to know what you think of the safety.
Is the above reason true?: Yes ofcourse.
Option of attack (You can pick more than 1 if there is many types of vulnerabilities): Just look if the website is solid.

Thanks in advance, Jysticim

Sure I will do. My laptops charger broke so it will be done either tomorrow or wednesday.

[Dyme‎‎‎‎‎‎‎‎‎‎‎‎]

Url: https://sbir2.st.dhs.gov/
Reason: because I'm bored
Is the above reason true?: of course
Option of attack (You can pick more than 1 if there is many types of vulnerabilities): I'm fairly confident that a professional hacker such as you will be able to gain a shell in a matter of minutes.

Code

Linux D2AEVISEPRST016.st.dhs.gov 2.6.18-348.16.1.el5PAE #1 SMP Sat Jul 27 01:08:12 EDT 2013 i686 i686 i386 GNU/Linux

Code

root:x:0:0:root:/root:/bin/bash
bin:x:1:1:bin:/bin:/sbin/nologin
daemon:x:2:2:daemon:/sbin:/sbin/nologin
adm:x:3:4:adm:/var/adm:/sbin/nologin
lp:x:4:7:lp:/var/spool/lpd:/sbin/nologin
sync:x:5:0:sync:/sbin:/sbin/nologin
shutdown:x:6:0:shutdown:/sbin:/sbin/nologin
halt:x:7:0:halt:/sbin:/sbin/nologin
mail:x:8:12:mail:/var/spool/mail:/sbin/nologin
news:x:9:13:news:/etc/news:/sbin/nologin
uucp:x:10:14:uucp:/var/spool/uucp:/sbin/nologin
operator:x:11:0:operator:/root:/sbin/nologin
games:x:12:100:games:/usr/games:/sbin/nologin
gopher:x:13:30:gopher:/var/gopher:/sbin/nologin
ftp:x:14:50:FTP User:/var/ftp:/sbin/nologin
nobody:x:99:99:Nobody:/:/sbin/nologin
nscd:x:28:28:NSCD Daemon:/:/sbin/nologin
vcsa:x:69:69:virtual console memory owner:/dev:/sbin/nologin
pcap:x:77:77::/var/arpwatch:/sbin/nologin
ntp:x:38:38::/etc/ntp:/sbin/nologin
dbus:x:81:81:System message bus:/:/sbin/nologin
avahi:x:70:70:Avahi daemon:/:/sbin/nologin
rpc:x:32:32:Portmapper RPC user:/:/sbin/nologin
mailnull:x:47:47::/var/spool/mqueue:/sbin/nologin
smmsp:x:51:51::/var/spool/mqueue:/sbin/nologin
sshd:x:74:74:Privilege-separated SSH:/var/empty/sshd:/sbin/nologin
oprofile:x:16:16:Special user account to be used by OProfile:/home/oprofile:/sbin/nologin
xfs:x:43:43:X Font Server:/etc/X11/fs:/sbin/nologin
rpcuser:x:29:29:RPC Service User:/var/lib/nfs:/sbin/nologin
nfsnobody:x:65534:65534:Anonymous NFS User:/var/lib/nfs:/sbin/nologin
haldaemon:x:68:68:HAL daemon:/:/sbin/nologin
avahi-autoipd:x:100:156:avahi-autoipd:/var/lib/avahi-autoipd:/sbin/nologin
gdm:x:42:42::/var/gdm:/sbin/nologin
sabayon:x:86:86:Sabayon user:/home/sabayon:/sbin/nologin
mohammed:x:500:500:Mohammed Rahman:/home/mohammed:/bin/bash
awagliar:x:501:501:Andrew Wagliardo:/home/awagliar:/bin/bash
clamav:x:101:157:Clam Anti Virus Checker:/var/clamav:/sbin/nologin
oracle:x:502:502:Oracle:/home/oracle:/bin/bash
rrback:x:503:504:Remote Backup account:/home/rrback:/bin/bash
ddews:x:504:505:Daveena Dews:/home/ddews:/bin/bash

A piru by the name of "Shark" gave me a shell. Does this make me a proffessional hacker? 🤝🤝🤝🤝

[Ichi]

Code

Linux D2AEVISEPRST016.st.dhs.gov 2.6.18-348.16.1.el5PAE #1 SMP Sat Jul 27 01:08:12 EDT 2013 i686 i686 i386 GNU/Linux

Code

root:x:0:0:root:/root:/bin/bash
bin:x:1:1:bin:/bin:/sbin/nologin
daemon:x:2:2:daemon:/sbin:/sbin/nologin
adm:x:3:4:adm:/var/adm:/sbin/nologin
lp:x:4:7:lp:/var/spool/lpd:/sbin/nologin
sync:x:5:0:sync:/sbin:/sbin/nologin
shutdown:x:6:0:shutdown:/sbin:/sbin/nologin
halt:x:7:0:halt:/sbin:/sbin/nologin
mail:x:8:12:mail:/var/spool/mail:/sbin/nologin
news:x:9:13:news:/etc/news:/sbin/nologin
uucp:x:10:14:uucp:/var/spool/uucp:/sbin/nologin
operator:x:11:0:operator:/root:/sbin/nologin
games:x:12:100:games:/usr/games:/sbin/nologin
gopher:x:13:30:gopher:/var/gopher:/sbin/nologin
ftp:x:14:50:FTP User:/var/ftp:/sbin/nologin
nobody:x:99:99:Nobody:/:/sbin/nologin
nscd:x:28:28:NSCD Daemon:/:/sbin/nologin
vcsa:x:69:69:virtual console memory owner:/dev:/sbin/nologin
pcap:x:77:77::/var/arpwatch:/sbin/nologin
ntp:x:38:38::/etc/ntp:/sbin/nologin
dbus:x:81:81:System message bus:/:/sbin/nologin
avahi:x:70:70:Avahi daemon:/:/sbin/nologin
rpc:x:32:32:Portmapper RPC user:/:/sbin/nologin
mailnull:x:47:47::/var/spool/mqueue:/sbin/nologin
smmsp:x:51:51::/var/spool/mqueue:/sbin/nologin
sshd:x:74:74:Privilege-separated SSH:/var/empty/sshd:/sbin/nologin
oprofile:x:16:16:Special user account to be used by OProfile:/home/oprofile:/sbin/nologin
xfs:x:43:43:X Font Server:/etc/X11/fs:/sbin/nologin
rpcuser:x:29:29:RPC Service User:/var/lib/nfs:/sbin/nologin
nfsnobody:x:65534:65534:Anonymous NFS User:/var/lib/nfs:/sbin/nologin
haldaemon:x:68:68:HAL daemon:/:/sbin/nologin
avahi-autoipd:x:100:156:avahi-autoipd:/var/lib/avahi-autoipd:/sbin/nologin
gdm:x:42:42::/var/gdm:/sbin/nologin
sabayon:x:86:86:Sabayon user:/home/sabayon:/sbin/nologin
mohammed:x:500:500:Mohammed Rahman:/home/mohammed:/bin/bash
awagliar:x:501:501:Andrew Wagliardo:/home/awagliar:/bin/bash
clamav:x:101:157:Clam Anti Virus Checker:/var/clamav:/sbin/nologin
oracle:x:502:502:Oracle:/home/oracle:/bin/bash
rrback:x:503:504:Remote Backup account:/home/rrback:/bin/bash
ddews:x:504:505:Daveena Dews:/home/ddews:/bin/bash

A piru by the name of "Shark" gave me a shell. Does this make me a proffessional hacker? 🤝🤝🤝🤝

Uhm, lmaoo.

This thread made me giggle

[pwntoken]

URL: https://hackforums.net/showthread.php?tid=3868297

Reason: I want to gain my ISP for bandwidth.

I have done my reseach. Everything is attached to the thread there and I would be happy if someone could assist me as no one replies on that thread. I think a group of community people could be of help rather than me alone learning something new.

Url: www.merletcollege.nl
Reason: So I work at the ICT of a school and they asked me to check if there is any vulnerability on the site. We just launched a new website and we want to see if it is a bit solid. I was invited as an outsider of the project and I need to check if there is any vulnerability. I tried to search but only could find the admin login page so I think it is pretty safe. Now I want to know what you think of the safety.
Is the above reason true?: Yes ofcourse.
Option of attack (You can pick more than 1 if there is many types of vulnerabilities): Just look if the website is solid.

Thanks in advance, Jysticim

I am doing this as well to help you!
I will mostly go through the web application layer and I will leave the network layer to the rest of the community to do. Or I could do it later when I find some time.

It looks that these directories may have CSRF on them (Cross Site Request Forgery). Nothing you could do much with this as it needs the client to make some clicks, and unless you trick them into doing so, this is useless.

Code

/activiteit-binnen-school.html
/begeleiding-en-zorg/jeugdagent.html
/begeleiding-en-zorg/leerlingbegeleiding.html
/begeleiding-en-zorg/schoolmaatschappelijk-werk.html
/c-mavovmbo-kijkje-in-de-school.html
/component/search
/contact/contactgegevens.html
/contact/medewerkers.html
/contact/postadres.html
/cuijk-mavovmbo.html
/cuijk-mavovmbo-activiteiten.html
/cuijk-mavovmbo-begeleiding.html
/cuijk-mavovmbo-jaarplanning.html
/cuijk-mavovmbo-leerlingenraad.html
/cuijk-mavovmbo-nieuws.html
/cuijk-mavovmbo-onderwijsaanbod.html
/cuijk-mavovmbo-ouderraad.html
/cuijk-mavovmbo-schoolleiding.html
/cuijk-mavovmbo-zorg.html
/cuijk-rooster.html
/cuijk-vwohavo.html
/cuijk-vwohavo-activiteiten.html
/cuijk-vwohavo-begeleiding.html
/cuijk-vwohavo-jaarplanning.html
/cuijk-vwohavo-kijkje-in-de-school.html
/cuijk-vwohavo-leerlingenparlement.html
/cuijk-vwohavo-nieuws.html
/cuijk-vwohavo-onderwijsaanbod.html
/cuijk-vwohavo-ouderraad.html
/cuijk-vwohavo-schoolleiding.html
/cuijk-vwohavo-zorg.html
/disclaimer.html
/eindexamen-2013-2014.html
/eindexamen-2013-2014/fotos.html
/eindexamen-2013-2014/projecten.html
/eindexamen-2013-2014/uitslagen.html
/grave.html
/grave-activiteitenenfoto.html
/grave-begeleiding.html
/grave-jaarplanning.html
/grave-kijkje-in-de-school.html
/grave-nieuws.html
/grave-onderwijsaanbod.html
/grave-ouderraad.html
/grave-rooster.html
/grave-schoolleiding.html
/grave-zorg.html
/groep8/aanmelden.html
/groep8/activiteiten-groep8.html
/groep8/belangrijke-data.html
/groep8/dagboek-van-een-brugklasser.html
/groep8/kijkje-in-de-school.html
/groep8/nieuwsbrieven.html
/groep8/onderwijs-op-het-merletcollege.html
/groep8/smoes-van-de-week.html
/groep8/straks-naar-de-middelbare-school.html
/groep8/tips.html
/magister.html
/mill.html
/mill-activiteiten.html
/mill-activiteiten.html (d02a987fbf0bb248b9c21f93a97b05eb)
/mill-activiteiten/category/141-poppenkast.html
/mill-activiteiten/category/162-vlotten-bouwen.html
/mill-activiteiten/category/168-londenreis.html
/mill-begeleiding.html
/mill-jaarplanning.html
/mill-kijkje-in-de-school.html
/mill-nieuws
/mill-nieuws.html
/mill-onderwijsaanbod.html
/mill-ouderraad.html
/mill-rooster.html
/mill-schoolleiding.html
/mill-zorg.html
/nieuws
/nieuws.html
/organisatie/bestuur.html
/organisatie/mr.html
/organisatie/ouderraden.html
/organisatie/raad-van-advies.html
/organisatie/schoolleiding.html
/organisatie/vacatures.html
/praktische-zaken/aanmelden.html
/praktische-zaken/kwaliteitskaart.html
/praktische-zaken/lestijden.html
/praktische-zaken/links.html
/praktische-zaken/ouderbijdrage.html
/praktische-zaken/regelingen.html
/praktische-zaken/schoolgids.html
/praktische-zaken/vakantie.html
/praktische-zaken/ziek-en-verlof.html
/rooster.html
/webredactie.html

All those are under the root directory.

Administrator page is in

Code

http://www.merletcollege.nl/administrator/index.php

uses Joomla.

This is the plugin directory you could dig to do some initial assessment.

Code

http://www.merletcollege.nl/plugins/content/

SSL is used in the second host, which are:

Code

SSL3_CK_RSA_RC4_40_MD5 - Low strength
SSL3_CK_RSA_RC2_40_MD5 - Low strength
SSL3_CK_RSA_DES_40_CBC_SHA - Low strength
SSL3_CK_RSA_DES_64_CBC_SHA - Low strength

These are probably weak and could lead to MITM attacks.
Weak SSL were found on the second host which is:

Code

http://telewerken.merletcollege.nl

AUTH REALM were found here, but there is no page:

Code

https://telewerken.merletcollege.nl/dana-na/auth

The actual locational portal is

Code

https://telewerken.merletcollege.nl/dana-na/auth

I could only dig this. I did not went for Network PT, I would do so tomorrow.

[Jysticim]

@ Encrypted32

Thank you already for doing this.

---

Thanks for looking into it Hexagon!

[Sʜᴀᴅᴏᴡ Rᴇᴀʟᴍ]

URL: https://hackforums.net/showthread.php?tid=3868297

Reason: I want to gain my ISP for bandwidth.

I have done my reseach. Everything is attached to the thread there and I would be happy if someone could assist me as no one replies on that thread. I think a group of community people could be of help rather than me alone learning something new.

I am doing this as well to help you!
I will mostly go through the web application layer and I will leave the network layer to the rest of the community to do. Or I could do it later when I find some time.

It looks that these directories may have CSRF on them (Cross Site Request Forgery). Nothing you could do much with this as it needs the client to make some clicks, and unless you trick them into doing so, this is useless.

Code

/activiteit-binnen-school.html
/begeleiding-en-zorg/jeugdagent.html
/begeleiding-en-zorg/leerlingbegeleiding.html
/begeleiding-en-zorg/schoolmaatschappelijk-werk.html
/c-mavovmbo-kijkje-in-de-school.html
/component/search
/contact/contactgegevens.html
/contact/medewerkers.html
/contact/postadres.html
/cuijk-mavovmbo.html
/cuijk-mavovmbo-activiteiten.html
/cuijk-mavovmbo-begeleiding.html
/cuijk-mavovmbo-jaarplanning.html
/cuijk-mavovmbo-leerlingenraad.html
/cuijk-mavovmbo-nieuws.html
/cuijk-mavovmbo-onderwijsaanbod.html
/cuijk-mavovmbo-ouderraad.html
/cuijk-mavovmbo-schoolleiding.html
/cuijk-mavovmbo-zorg.html
/cuijk-rooster.html
/cuijk-vwohavo.html
/cuijk-vwohavo-activiteiten.html
/cuijk-vwohavo-begeleiding.html
/cuijk-vwohavo-jaarplanning.html
/cuijk-vwohavo-kijkje-in-de-school.html
/cuijk-vwohavo-leerlingenparlement.html
/cuijk-vwohavo-nieuws.html
/cuijk-vwohavo-onderwijsaanbod.html
/cuijk-vwohavo-ouderraad.html
/cuijk-vwohavo-schoolleiding.html
/cuijk-vwohavo-zorg.html
/disclaimer.html
/eindexamen-2013-2014.html
/eindexamen-2013-2014/fotos.html
/eindexamen-2013-2014/projecten.html
/eindexamen-2013-2014/uitslagen.html
/grave.html
/grave-activiteitenenfoto.html
/grave-begeleiding.html
/grave-jaarplanning.html
/grave-kijkje-in-de-school.html
/grave-nieuws.html
/grave-onderwijsaanbod.html
/grave-ouderraad.html
/grave-rooster.html
/grave-schoolleiding.html
/grave-zorg.html
/groep8/aanmelden.html
/groep8/activiteiten-groep8.html
/groep8/belangrijke-data.html
/groep8/dagboek-van-een-brugklasser.html
/groep8/kijkje-in-de-school.html
/groep8/nieuwsbrieven.html
/groep8/onderwijs-op-het-merletcollege.html
/groep8/smoes-van-de-week.html
/groep8/straks-naar-de-middelbare-school.html
/groep8/tips.html
/magister.html
/mill.html
/mill-activiteiten.html
/mill-activiteiten.html (d02a987fbf0bb248b9c21f93a97b05eb)
/mill-activiteiten/category/141-poppenkast.html
/mill-activiteiten/category/162-vlotten-bouwen.html
/mill-activiteiten/category/168-londenreis.html
/mill-begeleiding.html
/mill-jaarplanning.html
/mill-kijkje-in-de-school.html
/mill-nieuws
/mill-nieuws.html
/mill-onderwijsaanbod.html
/mill-ouderraad.html
/mill-rooster.html
/mill-schoolleiding.html
/mill-zorg.html
/nieuws
/nieuws.html
/organisatie/bestuur.html
/organisatie/mr.html
/organisatie/ouderraden.html
/organisatie/raad-van-advies.html
/organisatie/schoolleiding.html
/organisatie/vacatures.html
/praktische-zaken/aanmelden.html
/praktische-zaken/kwaliteitskaart.html
/praktische-zaken/lestijden.html
/praktische-zaken/links.html
/praktische-zaken/ouderbijdrage.html
/praktische-zaken/regelingen.html
/praktische-zaken/schoolgids.html
/praktische-zaken/vakantie.html
/praktische-zaken/ziek-en-verlof.html
/rooster.html
/webredactie.html

All those are under the root directory.

Administrator page is in

Code

http://www.merletcollege.nl/administrator/index.php

uses Joomla.

This is the plugin directory you could dig to do some initial assessment.

Code

http://www.merletcollege.nl/plugins/content/

SSL is used in the second host, which are:

Code

SSL3_CK_RSA_RC4_40_MD5 - Low strength
SSL3_CK_RSA_RC2_40_MD5 - Low strength
SSL3_CK_RSA_DES_40_CBC_SHA - Low strength
SSL3_CK_RSA_DES_64_CBC_SHA - Low strength

These are probably weak and could lead to MITM attacks.
Weak SSL were found on the second host which is:

Code

http://telewerken.merletcollege.nl

AUTH REALM were found here, but there is no page:

Code

https://telewerken.merletcollege.nl/dana-na/auth

The actual locational portal is

Code

https://telewerken.merletcollege.nl/dana-na/auth

I could only dig this. I did not went for Network PT, I would do so tomorrow.

http://www.acunetix.com/

cool story bro

[DJenkinson]

Great service lol. I will be back to test haha