[gregdayton]

Hey,

I've been dabbling a bit with some hacking methods recently - mainly just for enjoyment. I've had a look at SQL injections and brute force attacks etc but I'm now thinking of trying them out.

Basically I would like to now like to try and get a few passwords from a couple of users on the record collecting website Discogs. I collect records myself and I know some users of people who it would be good to get some research on what music labels etc they are contacting so I can look myself.

The website appears to be built in HTML and speaking to someone who knows a bit more than me said that their server is cloud based - not sure if that will make a difference. You can also try to login to the website with different passwords as many times as you want - no limit. Also I gathered that the security would be minimal as the website doesn't contain any sensitive information at all.

Would anyone be able to help me do this or give me a few pointers how it could be done? So for example my Discogs username is 'gregdayton' and you can login here - discogs.com/login

I was thinking of using Hashcat (might be a bit complex for a beginner) or Cain & Abel I just don't know how to use it.

Any help would be really appreciated - if I can see some new record labels on the areas I love musically it'd be amazing.

Greg

[gregdayton]

Can anyone help with the above? Any tips? Thanks

[berlinmg20]

Can anyone help with the above? Any tips? Thanks

I am also trying to do this, have you had any luck with finding someone? Thanks

[sluggerz]

Bruteforce it. It would be alot easier unless you know of an injection point.

[Jazzyways]

If anyone's had success, i'm interested in hearing about that :)

[gregdayton]

Hey,

Did anyone have any joy or tips with this? Still looking to do so.

thanks

Greg

[Jazzyways]

Yo greg, we are in the same boat here. Hit me up on skype: jazzywaysss and lets talk about getting this done!

[Jazzyways]

Yo greg, lets do this! Hit me up..

[Gee4rce]

I doubt people will look on your prementioned website as this requires time and maybe the site isn't vulnerable in the end.
If you still want to learn, then get 10 posts and send me a pm (you need atleast 10 or 15 posts to send pm's), i will then provide you a vulnerable website for training purposes.
Cheers, Gee.

[Jazzyways]

Thanks Gee! its actually something i'd rather pay for, but i can't post in the marketplace yet. However ut gets done, i will be happy! Thanks again..