[problems.x]

Hey guys, as co-leader of Team Syntax I am opening a recruitment thread for those who believe they are worthy to join. The group is about hacking and money-making - we aren't a group for skids that come along with their $5 booter trial and claim to be hackers, we are looking for people who actually hold the expertise and are dedicated to hacking/money-making.

View our website: http://www.teamsyntax.net/ (Deface Page)

Note: We will also be recruiting one graphic designer - if you wish to be apart of this group, just show us your skills. Fill out the basic recruitment details rather than the questions about hacking knowledge.
Recruitment Application Template
Spoiler (Click to View)

Code

Username:

Age:

Skillset:

Do you understand how to use IRC?:

Define SQL Injection and briefly how you would perform a manual attack from target analysis to execution of vulnerability:

You find a server and you aren't sure what services it is running. How could you find out what they are running and if it is vulnerable? List tool names where appropriate:

How does hashing work?:

How does salted password hashing work?:

What are some of the benefits of using a unique individual user salt for security?

[Chrylix]

Member Roster

Slow - Leader
Incapability - Co-Leader
Zayne - Senior Member
ℒℯᘜℯηD҉ - Member
aahgfdjhgrhgh - Member
Shiva - Member
Pángǔ - Member
Plethora - GFX Designer

---

On a side note - good luck to all applicants. I hope we can find a space for you worthwhile members on our team.

---

I should also probably say you are not expected to answer all questions if you do not understand them. Don't bother Googling the answer if you don't know it because you won't be able to apply it when needed.

[BLKLXVESMATTER!]

Cba to fill out an app. Bring me in.

[Gigabear]

Username: Leaflord

Age: 13

Skillset: I watched a cmd ddos video sooo yeah

Do you understand how to use IRC?: I googled IRC and it says something about chat and I use skype so yeah I'm good with the IRC

Define SQL Injection and briefly how you would perform a manual attack from target analysis to execution of vulnerability: Yeah so I would get my SQL injection finder and run it on the site and it would tell me what to do

You find a server and you aren't sure what services it is running. How could you find out what they are running and if it is vulnerable? List tool names where appropriate: Open task manager and select services.

How does hashing work?: You take a number and hash it to make it a secret number.

How does salted password hashing work?: You know I'm always wanting to learn more and that would greatly expand my knowledge. My leaf works in the password hashing industry especially with salt and he can teach me I'm always looking into that.

What are some of the benefits of using a unique individual user salt for security? It makes it harder to be cracked I think.

sources: google.com

[Chrylix]

Username: Leaflord

Age: 13

Skillset: I watched a cmd ddos video sooo yeah

Do you understand how to use IRC?: I googled IRC and it says something about chat and I use skype so yeah I'm good with the IRC

Define SQL Injection and briefly how you would perform a manual attack from target analysis to execution of vulnerability: Yeah so I would get my SQL injection finder and run it on the site and it would tell me what to do

You find a server and you aren't sure what services it is running. How could you find out what they are running and if it is vulnerable? List tool names where appropriate: Open task manager and select services.

How does hashing work?: You take a number and hash it to make it a secret number.

How does salted password hashing work?: You know I'm always wanting to learn more and that would greatly expand my knowledge. My leaf works in the password hashing industry especially with salt and he can teach me I'm always looking into that.

What are some of the benefits of using a unique individual user salt for security? It makes it harder to be cracked I think.

sources: google.com

God damnit Adam 😏

[Plethora]

Username: Plethora

Age: 15

Skillset: GFX GFX GFX GFX

Do you understand how to use IRC?: Yeah.

Define SQL Injection and briefly how you would perform a manual attack from target analysis to execution of vulnerability: Too much work, but I understand the basics.

You find a server and you aren't sure what services it is running. How could you find out what they are running and if it is vulnerable? List tool names where appropriate: NOT ACUNETIX.

Nikto
Metasploit
OpenVAS

How does hashing work?: Fuck that

How does salted password hashing work?: Fuck you.

What are some of the benefits of using a unique individual user salt for security? No. I just do GFX.

[Chrylix]

Username: Plethora

Age: 15

Skillset: GFX GFX GFX GFX

Do you understand how to use IRC?: Yeah.

Define SQL Injection and briefly how you would perform a manual attack from target analysis to execution of vulnerability: Too much work, but I understand the basics.

You find a server and you aren't sure what services it is running. How could you find out what they are running and if it is vulnerable? List tool names where appropriate: NOT ACUNETIX.

Nikto
Metasploit
OpenVAS

How does hashing work?: Fuck that

How does salted password hashing work?: Fuck you.

What are some of the benefits of using a unique individual user salt for security? No. I just do GFX.

Sent you a PM regarding your GFX work.

[Plethora]

Sent you a PM regarding your GFX work.

Sent you a PM right back, LMK

[problems.x]

Still open for applications.
Please only post serious applications.

[Chrylix]

Still open for applications.
Please only post serious applications.

Post up boys, we've got big things going on right this second.

[#Exploit]

Username: Legend

Age: Near to 30 :)

Skillset: Hack Web application, Penetration testing, Networking exploitation, Buff3r ov3r fl0w :) and more

Do you understand how to use IRC?: no , skype is my thing

Define SQL Injection and briefly how you would perform a manual attack from target analysis to execution of vulnerability:

You find a server and you aren't sure what services it is running. How could you find out what they are running and if it is vulnerable? List tool names where appropriate:
Nmap
Sqlmap
Fimap
burpsuite
W3af

How does hashing work?:
Google it

How does salted password hashing work?: it's not my thing

What are some of the benefits of using a unique individual user salt for security?
New thing is always good for security shit. But you must test how it's secure before u use it.

[E-Nonymous]

lol, why not

Username: e-n0n

Age: 24

Skillset: python, vba, sh/bash batch scripting, networking, SE

Do you understand how to use IRC?: Yes, but why?

Define SQL Injection and briefly how you would perform a manual attack from target analysis to execution of vulnerability:

Server uses a bunch of tables and columns that hold data, you find a vulnerable script and start fuzzing to find information blah blah blah

You find a server and you aren't sure what services it is running. How could you find out what they are running and if it is vulnerable? List tool names where appropriate:

plenty. propecia for specific port poking, finger, ping, nmap (loudlol), msf modules if ya want, vas bullshit and using a web browser

How does hashing work?: jokes though? you're just mapping sizes to fixed sizes using huge math to make hard to crack limited length data

How does salted password hashing work?: create more entropy for reuse of hashed objects. boom toasty

What are some of the benefits of using a unique individual user salt for security? more secure breh

[Faith Connors]

Well I guess I'll take a shot at it, but I don't really do anything blackhat or participate in many hacking activities.


Username: aahgfdjhgrhgh, but just call me Faith or Nilin.

Age: 17

Skillset: Basic scripting, just enough to get by. Primarily AutoIt.
I speak 3 languages, English, French and Polish. In the process of learning some Japanese, nowhere near level where I can speak it, though.
I play vidija gaymes casually. That's probably not really a skill though.
I can run pretty fast.

Do you understand how to use IRC?: All day long, ebookz was my home.

Define SQL Injection and briefly how you would perform a manual attack from target analysis to execution of vulnerability:
SQL injection is the process of exploiting SQL queries to get data from a database without authentication.
If you want, I can give solutions for l33ttime's Basic 2 and Death row 1 challenges. I'm a little tight on time right now.

You find a server and you aren't sure what services it is running. How could you find out what they are running and if it is vulnerable? List tool names where appropriate: If you're on the same network and you're on Windows, just type "tasklist /s" followed by the name of the computer. To get the name of the computer, just use nmap to map out the network and get a list of hosts.

If you have an IP and want to scan the target remotely, scan with nmap, as sometimes it can pick up on some services that are running on the server, along with some other info (OS, uptime, etc.) If you don't get anything, see what ports are open, sometimes that can tell you what services are likely to be running. Example: BitTorrent uses port 6969 by default. A Minecraft server uses (or at least used to, dunno if it does anymore) port 25565.

How does hashing work?: Let's use PGP as an example. I know, it's encryption, and it's not hashing, but there is a big similarity in the algorithm. In PGP you have a private key, and a public key. The public key is for anyone who wants to encrypt a message and send it to you. Cool, once that message is encrypted, however, it can only be decrypted by the private key, which is what the person who owns the public key has.
I'm going to oversimplify this a little, but let's say a private key is two huge numbers, maybe around 50 digits long each. Both those numbers are prime numbers, and they are different from each other. We know that the higher we are on the number line, the more sparse are prime numbers. So there are quite a bit of possibilities for prime numbers in the 50-digit range, but at least we know the numbers are prime. Now, if you multiplied those numbers together, you'd get a public key, a number that is divisible only by one, your two numbers, and itself. If I asked you to factor this huge 2500 digit long number which only has two factors, it would take you forever. I mean forever, like hundreds of years. So before anyone could decrypt the message, they'd have to get these starting numbers. Hashing is similar, in the way that it has its own algorithm/function which starts with a few variables, and makes its own little "key" to hash the data, and to decrypt it you'd need the starting variables. Think of it like this:

F(x) = 6t
If you had the value of x and you had to solve for t, it would be rather simple, given you knew how the function worked.
If you had the value for t and had to solve for x, it would be more challenging, even if you knew how the function worked, because you'd have to work backwards and there could be more variables along the way as well.

How does salted password hashing work?: I have no idea.

What are some of the benefits of using a unique individual user salt for security? I have no idea.

[Chrylix]

Sent out some PM's to notable applicants to come for a chat - if you didn't get a PM do not panic. You may still be being considered.

[Krule]

Username: Krule

Age: 19

Skillset: Chilling, gaming, Former mIRC scripter, Disc Jockey for HFLive

Do you understand how to use IRC?: I've used it since 2006. Haven't used it in 2 years, but would start again.

Define SQL Injection and briefly how you would perform a manual attack from target analysis to execution of vulnerability: inject a string and change information LOL