[Bungle]

Hi all. don't know if this query will get me kicked out but here goes.
I recently got ripped of on a site called Kinkysexuk. lay off with the pervert jokes, we have all looked. im not generally dumb but did I get sucked in. I wasn't on there to cheat, im single. turns out its a scam, took me a while to see what was going on.
well, I've never hacked before and im pi**ed.
would one of you guys who have the technical ability take a look at the site and tell me if there is anything I can do to repay them for their superb customer experience?
or any advice would be welcome. thx, Bungle.

[zer0pwn]

well first get yourself a bitcoin wallet, fill it up with some coin, then come back and ask in the right section! that would be your best bet. requests aren't allowed in this sub forum. read the rules.

[devil6]

So right off the bat.

At least half of the featured members, are in e-whore packs that you can get for free on these very forums... kinda shoulda been your first hint.
second the site is almost entirely http. No legit site that takes payments for anything should be in entirely http...


as for things you can do?
a quick look tells me it has XSS vulns on some of the search params, area= is the only one i really looked at.
registration to the site sends back your pass in cleartext. usually suggests that the back-end DB is in cleartext.
there is probably an sqli vuln there somewhere, assuming they even bothered to set up a DB at all.
it's an obvious and honestly half-assed scam site, would not be surprised if new members login details are just a text file somewhere.

go look up and learn how to do basic web app hacking.
and have a go yourself.
might be advisable to lookup laws around that type of activity in your area while your at it..

not really going to bother looking into it any more than that.
and this is more than you are going to get from most members.
GLHF
Try not to get scammed by sites full of public e-whores in future :)

[Killa Priest]

So right off the bat.

At least half of the featured members, are in e-whore packs that you can get for free on these very forums... kinda shoulda been your first hint.
second the site is almost entirely http. No legit site that takes payments for anything should be in entirely http...


as for things you can do?
a quick look tells me it has XSS vulns on some of the search params, area= is the only one i really looked at.
registration to the site sends back your pass in cleartext. usually suggests that the back-end DB is in cleartext.
there is probably an sqli vuln there somewhere, assuming they even bothered to set up a DB at all.
it's an obvious and honestly half-assed scam site, would not be surprised if new members login details are just a text file somewhere.

go look up and learn how to do basic web app hacking.
and have a go yourself.
might be advisable to lookup laws around that type of activity in your area while your at it..

not really going to bother looking into it any more than that.
and this is more than you are going to get from most members.
GLHF
Try not to get scammed by sites full of public e-whores in future :)

Very true. I didn't browse it much but yea, there is more vuln sqli than there is xss with their search parameters. Fucked up you got ripped. If you were referred to that website, your mate prolly screwed you. I wouldn't be surprised if the website belonged to a member from on here...The e-whore section of this forum is heavy. Goto the 'Request Hack' section or use this link https://hackforums.net/forumdisplay.php?fid=48

Goodluck with whatever you decide to do.

[Bungle]

Thanks fellas for taking the time to give me something.