Spoof Call and Spoof SMS set any caller ◆ Traffic service & campaign optimization ◆ Private Crypter - Unique Private Stubs ◆ ZexoCard: no-KYC virtual crypto cards ◆
Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact
Hack Forums Hacks, Exploits, and Various Discussions Grayhat • Purple Team • Hybrid Security Website Hacking › Databases for cracking accounts.

New Reply 

Databases for cracking accounts.
Se7eNSiNs
Se7eNSiNs Offline
[closed@HF:]
Posts:
64
Threads:
12
DO NOT DEAL WITH THIS MEMBER
βytes:
β 0
Game XP:
0
Jul 11, 2019 03:50 AM (This post was last modified: Jul 11, 2019 03:50 AM by Se7eNSiNs.)
I'm just wondering how i would go about hitting databases of websites to pull user:pass information to make a combo list use for cracking accounts of various of websites, I've bought combo lists in the past to use with Sentry however i dont want to buy lists i would much prefer to make my own.
Zeda
Zeda Offline
#root
*
Registered
Posts:
91
Threads:
3
Credibility:
200
Popularity:
65
βytes:
β 0
Game XP:
46
Jul 12, 2019 06:51 AM
Many different ways. From SQLi to RATs. Just google it.
[Image: vwCnf2D.jpg]
Se7eNSiNs
Se7eNSiNs Offline
[closed@HF:]
Posts:
64
Threads:
12
DO NOT DEAL WITH THIS MEMBER
βytes:
β 0
Game XP:
0
Jul 12, 2019 08:28 AM
(Jul 12, 2019 06:51 AM)Zeda Wrote:  Many different ways. From SQLi to RATs. Just google it.

Is SQLi a plausable way? i thought that was patched up years ago/
BITCOIN CALIBRA
BITCOIN CALIBRA Offline
[n00b@HF:]
*
Registered
Posts:
1
Threads:
0
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
0
Jul 12, 2019 03:36 PM
I'm just wondering how i would go about hitting databases of websites to pull user:pass information to make a combo list use for cracking accounts of various of websites, I've bought combo lists in the past to use with Sentry however i dont want to buy lists i would much prefer to make my own.
Zeda
Zeda Offline
#root
*
Registered
Posts:
91
Threads:
3
Credibility:
200
Popularity:
65
βytes:
β 0
Game XP:
46
Jul 13, 2019 02:19 AM
(Jul 12, 2019 08:28 AM)Se7eNSiNs Wrote:  Is SQLi a plausable way? i thought that was patched up years ago/

Its kinda super rare. But still some sites run it.
[Image: vwCnf2D.jpg]
Empire Network
Empire Network Offline
[n00b@HF:]
*
HF l33t
Posts:
70
Threads:
4
Credibility:
001
Popularity:
19
βytes:
β 0
Game XP:
0
Jul 13, 2019 12:56 PM
(Jul 13, 2019 02:19 AM)Zeda Wrote:  Its kinda super rare. But still some sites run it.

Hey guys! This guy's a scammer. Just scammed me out of $165 in BTC by this guy. I'm new, didn't understand contracts, trusted someone on the internet. Be sure to avoid him, contract or not. Clearly doesn't value his word :)
Se7eNSiNs
Se7eNSiNs Offline
[closed@HF:]
Posts:
64
Threads:
12
DO NOT DEAL WITH THIS MEMBER
βytes:
β 0
Game XP:
0
Jul 14, 2019 03:39 AM
(Jul 13, 2019 12:56 PM)Empire Network Wrote:  Hey guys! This guy's a scammer. Just scammed me out of $165 in BTC by this guy. I'm new, didn't understand contracts, trusted someone on the internet. Be sure to avoid him, contract or not. Clearly doesn't value his word :)

Nobody is buying anything here stop shitposting
Condasoft
Condasoft Offline
[user@HF:]
*
Registered
Posts:
226
Threads:
31
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
0
Jul 14, 2019 03:42 AM (This post was last modified: Jul 14, 2019 03:42 AM by Condasoft.)
(Jul 12, 2019 08:28 AM)Se7eNSiNs Wrote:  Is SQLi a plausable way? i thought that was patched up years ago/

You would be surprised a lot of the people implementing databases don't cover their arses with an injection cheat sheet.
Central Sky
Central Sky Offline
[closed@HF:]
Posts:
391
Threads:
24
DO NOT DEAL WITH THIS MEMBER
βytes:
β 0
Game XP:
10,000
Jul 14, 2019 04:26 AM
Don't deal with scammer asshole, use always contract system on HF
Se7eNSiNs
Se7eNSiNs Offline
[closed@HF:]
Posts:
64
Threads:
12
DO NOT DEAL WITH THIS MEMBER
βytes:
β 0
Game XP:
0
Jul 15, 2019 09:42 AM
(Jul 14, 2019 03:42 AM)Condasoft Wrote:  You would be surprised a lot of the people implementing databases don't cover their arses with an injection cheat sheet.

Yeah I've just recently noticed the tonns of websites without any HTTPS but left them selfs vuln with the members.php?id= ... I've hit like 4 databases since i posed.
Sophoclito
Sophoclito Offline
[user@HF:]
*
Registered
Posts:
168
Threads:
40
Credibility:
000
Popularity:
16
βytes:
β 0
Game XP:
0
Jul 15, 2019 11:28 AM
(Jul 12, 2019 08:28 AM)Se7eNSiNs Wrote:  Is SQLi a plausable way? i thought that was patched up years ago/

Of course lol it's the main channel to acquire combos
bravetoaster
bravetoaster Offline
[user@HF:]
*
Registered
Posts:
102
Threads:
5
Credibility:
000
Popularity:
9
βytes:
β 0
Game XP:
0
Jul 17, 2019 02:25 PM
ppl not in infosec seem to think sqli is far more prevalent than it is. They see it on OWASP top 10 and say "Oh look how prevalent it is" not knowing they're ranked by severity and not frequency of occurrence. How many sites does WP brag they shittly uphold? Well that right there is some-odd million(s) that using MariaDB - and most idiots (aka graphic designers that think bc they can drag a mouse around in PS they can fucking code) leave the generic db logins on (even though newest MariaDB - on debian and ubuntu mirrors at least - refute root login at all.) I mean quick and easy way to determine if it's vulnerable is add a " ' ' at the end of the URL (thats a single quotation without the spacing nonsense I just did for clarity.) If you get a page refresh - not vulnerable, well at least it's about 80% guaranteed it's not. If it is, it's likely a blind sqli. I personally find more template injections than SQLis anymore. MEAN ( and well just Node really) have become so prevalent and appealing that sometimes you find more non-relational DBs. NoSQL DBs consist of data that doesn't follow standard tabular model as SQL (data keys aren't related in a hard or static fashion.) But NoSQL has it's vulnerabilities too. [{"$gt":""}] is the equivalent of 1' or '1 = 1'; Developers are lazy, and don't typically posess a 'security-first' mindset. You fashion your queries right and do some google dorking and promise you'll find plenty of DBs to query around with.
boy rteis
boy rteis Offline
[n00b@HF:]
*
Registered
Posts:
23
Threads:
4
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
0
Jul 21, 2019 10:15 AM (This post was last modified: Jul 21, 2019 09:34 PM by boy rteis.)
(Jul 13, 2019 02:19 AM)Zeda Wrote:  Its kinda super rare. But still some sites run it.

I need your help, PM me, because I am a new member, can not reply to you, please leave your contact information
(Jul 14, 2019 03:42 AM)Condasoft Wrote:  You would be surprised a lot of the people implementing databases don't cover their arses with an injection cheat sheet.


我需要你的帮助，PM我,因为我是新成员，不能回复你，请留下你的联系方式
verox
verox Offline
[n00b@HF:]
*
Registered
Posts:
20
Threads:
0
Credibility:
000
Popularity:
-5
βytes:
β 0
Game XP:
0
Sep 27, 2019 05:31 AM
bro wtf, nobody can help u with that, try to do a social engineer and recover password
Next Oldest | Next Newest
New Reply 


Possibly Related Threads...
Thread / Author Replies Views Last Post
by NwHOwnzFeb 26, 2017 08:34 PM 0 155 Feb 26, 2017 08:34 PM
Last Post: NwHOwnz