[Makhnovist]

https://hackforums.net/member.php?action...id=3784247

The deal we had:

Hey, vuln in "-removed-" wp plugin  - 600k active users.
SSTI, leading to RCE @ both client and server-side. Current PoC shows that vuln exists, can pop calc.exe - weaponizing the PoC will require a payload (or a webshell) on your behalf.

1GUVLm3rMHKRgMdUqJu4gP9Gpv6YEfULkU

The amount was $800, the BTC transaction is aef6ea058ba57c39dc5be45f5029c9f6eca8290bc4350ef35192470c07d8b4db


The payment was made 5 days ago. I still do not have the merchandise.


In his own words, the terms regarding the refund:

okay well ill take a look at my notes as soon as i get a chance, if not ill refund you. only refunding if i cant repro PoC tho.

(From PM on the 16th of November)

(From last Wednesday)


I even gave him extra time, 3 days even though he initially claimed he only need one, and also offering him a fresh VPS for his testing needs:


I messaged him 3 hours prior to the 72 hours deadline with no response. I also waited for a few hours after that before making this thread.





The "proof of concept" he delivered was a request as follow:

Code

/wp-content/plugins/-pluginname-/conf.php?some_parameters

When the plugin folder did not even contain a file such as conf.php

When I told him that the file does not exist and the PoC does not work, and that a thread would be made within 2 hours unless he delivers the promised merchandise, he claims that I "fail to understand basic php" and that he "gave you what you asked for".



He then proceeded to threaten me with a Discord 0day that he apparently has (which would be a surprise if it indeed exists considering how he fails to deliver a simple exploit nor refund a measly $800)



He promises to deliver a demo of the PoC to show it was functional, which ended up never happening because he apparently went out with friends, never to answer again that night.




His PMs are full of excuses and promises undelivered, nothing more.







As the deal was formulated not on HF but HF was mainly used only for identity verification, I did not use the contract system, thus this does not qualify as a deal dispute but rather a community alert to those concerned.

Usually I would not bother making a deal dispute thread for a measly $800 but as he has made multiple threats towards me I feel rather compelled to do so.

[Bill Gates]

Sorry for your loss, I noticed Omni killing his account earlier. All these people that dick rode him in his thread must be feeling swell now.

Scumbags be scumbags.

[James Burnham]

His trustscan
Latest IP Matching Other Members: 5

[Pronouncer]

Ahh this explains why he gfot closed yet again

[cheeseybean33]

damn hope u get your money back man, that suck

[Evil]

Damn sorry OP that really sucks. I was wondering why he was closed. Honestly, I’d make the people that vouched for him pay back OP cuz that’s ridiculous that he only lasted a week without scamming.

[UpTheCrust]

His trustscan
Latest IP Matching Other Members: 5

most or not all of those were already known. He had an account forever ago and then made a few trying to get omni to unban him before he made this final one

[TOM]

I had Two Hour session with MLT and it went smooth .. Didn't see this coming from a guy like MLT who has much more skills than a looser who is a scumbug

[UpTheCrust]

I had Two Hour session with MLT and it went smooth .. Didn't see this coming from a guy like MLT who has much more skills than a looser who is a scumbug

It does seem odd considering everyone knows who he is irl

[_M_L_T_]

I provided you with a proof of concept. you were too dumb to weaponize it. Why not post the PM where I specifically said weaponizing your PoC WAS NOT part of the deal? You wanted me to tailor the PoC to target a specific website for your criminal activity. I'm not prepared to do that.

You've intentionally left out the original PM where we arranged the conditions of the deal, why?

[CyberError]

Wish you done this on contract to make your case strong ,, good luck tho

[Evanescent]

Damn that's a RIP. Hope you get it resolved.

I think HF and him doesn't go hand to hand. He's gone again.

[SIM-82498]

OP is once again SCAMMING. Blackhats don't change. He's fucking scum.

Dang it. I wanted to see some positive change on the forums from M L T. Ah wells. Sorry that you got scammed bud.

[Bill Gates]

Dang it. I wanted to see some positive change on the forums from M L T. Ah wells. Sorry that you got scammed bud.

I doubt he will ever be given a third chance :D, probably shouldn't have been given a second chance, that dude would still have his $800 if that cunt wasn't allowed back in.

[SIM-82498]

I doubt he will ever be given a third chance :D, probably shouldn't have been given a second chance, that dude would still have his $800 if that cunt wasn't allowed back in.

Yeah - from what I've seen from my time on HF, it takes a lot for Omni to reverse a perm ban on a user, not to mention a scammer. I wonder why he was allowed back on in the first place.