(Jun 3, 2015 01:18 PM)WubCannon Wrote: It also stands out like a clown in a synagogue in webserver logs. Its pretty much the best way to get the server admins attention aside from sending him an email saying "hai can i heck ur server pl0x"
There server also doesn't support proxy blocking. So, even though your basically knocking on the door, you can knock on the door, using different people.
s27.postimg.org/zfwd4l3jn/Untitled.png
sscrm.pinnacle.com.ph/sansebastian/students/index.php
Btw, it has a SQL injection vulnerability.
(Jun 3, 2015 03:52 PM)R00t M4st3r Wrote: There server also doesn't support proxy blocking. So, even though your basically knocking on the door, you can knock on the door, using different people.
s27.postimg.org/zfwd4l3jn/Untitled.png
sscrm.pinnacle.com.ph/sansebastian/students/index.php
Btw, it has a SQL injection vulnerability.
its not all about bruting your way in. Most likely OP wants to change his grades or hack his school. As soon as an admin checks the logs they are going to know something is up.
(Jun 3, 2015 12:33 PM)UnParad0x Wrote: .edu = jail time plus being monitored and logged for the rest of your life
this is a bit of a ridiculous claim to make
(Jun 3, 2015 03:52 PM)R00t M4st3r Wrote: There server also doesn't support proxy blocking. So, even though your basically knocking on the door, you can knock on the door, using different people.
s27.postimg.org/zfwd4l3jn/Untitled.png
sscrm.pinnacle.com.ph/sansebastian/students/index.php
Btw, it has a SQL injection vulnerability.
Haha its funny that you found, this sql vuln through an xss injection happened to me, in alot of situations aswell.
Nice find :)
After few days you post a thread "What i do, Police took my PC". lol
(Jun 4, 2015 01:13 AM)Rilit Wrote: After few days you post a thread "What i do, Police took my PC". lol
Police actually need a warrant to take your belongings. Even if there on your person. Time they get the warrant. You can break your computer, reformat your hard drive. Encrypt your data. There's tools where they can go back and unscramble the reformatted data and see what you been doing. But who cares haha most of the time if you are smart about it you won't get caught.
(Jun 4, 2015 12:45 PM)R00t M4st3r Wrote: Police actually need a warrant to take your belongings. Even if there on your person. Time they get the warrant. You can break your computer, reformat your hard drive. Encrypt your data. There's tools where they can go back and unscramble the reformatted data and see what you been doing. But who cares haha most of the time if you are smart about it you won't get caught.
> need a warrent
> noshit.jpg
> break RAM
> dissasemble hard drive + use magnets, hammer, flames as well as AES 256bit encryption.
> they can still go back and 'usncramble the data'
> unscramble
pls.
(Jun 4, 2015 08:09 PM)WubCannon Wrote: > need a warrent
> noshit.jpg
> break RAM
> dissasemble hard drive + use magnets, hammer, flames as well as AES 256bit encryption.
> they can still go back and 'usncramble the data'
> unscramble
pls. RAM is a volatile storage unit. Completely erasing it is as simple as plugging it off.
(Jun 5, 2015 06:21 AM)Th3PonyWizard Wrote: RAM is a volatile storage unit. Completely erasing it is as simple as plugging it off.
Everyone knows you can perform coldboot attack on DRAM and SRAM. If the police are going to raid your house for a computer crime, they will either ensure the computer is kept on, or perform a rapid coldboot attack, with some RAM models being susseptible to this attack for upto several hours if the system is cooled, but even upto 2 minuites on DDR2
(Jun 4, 2015 12:45 PM)R00t M4st3r Wrote: Police actually need a warrant to take your belongings. Even if there on your person. Time they get the warrant. You can break your computer, reformat your hard drive. Encrypt your data. There's tools where they can go back and unscramble the reformatted data and see what you been doing. But who cares haha most of the time if you are smart about it you won't get caught.
OK but even if you can remove the evidence, how do you know that the police are trying to get a warrant? They don't exactly send you a letter saying "We are trying to get a warrant to raid your place for computer related crimes so please be a good boy and dont destroy your evidence, thanks :)"
(Jun 5, 2015 05:22 PM)Paul Wilson Wrote: OK but even if you can remove the evidence, how do you know that the police are trying to get a warrant? They don't exactly send you a letter saying "We are trying to get a warrant to raid your place for computer related crimes so please be a good boy and dont destroy your evidence, thanks :)"
No, you just have to tighten your opsec. Using an os like tails, booted off a USB, in a cheap laptop with the harddrives taken out, and then attaching the USB to your person via string or cord, so that if the feds do bust in, all it takes is for you to walk away from that laptop, possibly break the RAM if needbe, and your in the clear. However, if they execute the warrant during the day, and you've left your computer in sleep mode or a similar state, all the encryption in the world can't help you, as it can be bypassed using certain methods
(Jun 5, 2015 09:24 AM)WubCannon Wrote: Everyone knows you can perform coldboot attack on DRAM and SRAM. If the police are going to raid your house for a computer crime, they will either ensure the computer is kept on, or perform a rapid coldboot attack, with some RAM models being susseptible to this attack for upto several hours if the system is cooled, but even upto 2 minuites on DDR2 am going to ask for u to back dat up
[5:58:44 PM] Starfall: RAM is volatile, but it does have capacitance
[5:58:44 PM] Starfall: it will hold data for a few seconds when unpowered
[6:33:10 PM] Sonder: so few seconds
[6:33:14 PM] Sonder: ok
(Jun 6, 2015 11:37 AM)Th3PonyWizard Wrote: am going to ask for u to back dat up
[5:58:44 PM] Starfall: RAM is volatile, but it does have capacitance
[5:58:44 PM] Starfall: it will hold data for a few seconds when unpowered
[6:33:10 PM] Sonder: so few seconds
[6:33:14 PM] Sonder: ok Lel, we can always rely on aurora. How is he? Haven't spoken to him for ages 😭
The research paper was from Princeton, i cannot post links due to my account restrictions, feel free to pm me your Skype/email and I'll send you the link, however im sure results can be yeilded from a Google search of 'Princeton coldboot attack research paper'
|
