[Anzee]

It was a simple web app penetration. The intentions were fairly mundane. Price lists and data. No theft of personal information. Just a real kosher corporate sabotage type thing! Popped a very badly protected management portal which was available from the internet and found plaintext passwords for the management backend hardcoded into JS functions.

I reconfigured some Tomcat settings to allow full HTTP request tracing and stole tons of client IDs over the course of a day. Using a simple cooked POST request I could log into any clients account and switch the ID I was ordering for since they failed to sanitize input in a lot of the forms they had within the client portal. The software is still full of persistent and non-persistent XSS. Either way, I ended up enumerating everything and dumped all the client IDs + their pricing lists.

Here's what it looks like when you drop 4 bands in 20's on the floor and pick them up one by one:

https://vimeo.com/287235473

Images of the brick: https://imgur.com/a/NbjDXt6

Feels good to profit from some good old fashioned hacking 🤝

[Voxi]

I love the video lol, nice one.

[Anzee]

I love the video lol, nice one.

It was definitely fun to make and Chief Keef was perfect for the music. Part Ways is a great song.

No lame shit, real talk.

[Almonds]

Lmao cuz is on the pot!

You dropping 4K on the floor and shitting at the same damn time?

[webdev77]

Sounds kind of cool. Real question though is why does everyone posting in this forum not use direct deposit? Wtf do you people get so much cash just for shits and giggles?

[Anzee]

Sounds kind of cool. Real question though is why does everyone posting in this forum not use direct deposit? Wtf do you people get so much cash just for shits and giggles?

It's off the books. No paper trails means no taxes and no questions.

I'd prefer a brick of cash any day of the week over some check.

[CocoPoff]

It's off the books. No paper trails means no taxes and no questions.

I'd prefer a brick of cash any day of the week over some check.

Amen to that 😏

[Anzee]

Amen to that 😏

And that just got you your first rep, brother.

[Wet Rag]

It's off the books. No paper trails means no taxes and no questions.

I'd prefer a brick of cash any day of the week over some check.

That is so backwards 🤦‍♂

[Anzee]

That is so backwards 🤦‍♂

How is that backwards?

[Chief Sosa]

Chief Keef lmaoooo

Older Chief Keef songs would've fit the video better tho.

[Anzee]

Chief Keef lmaoooo

Older Chief Keef songs would've fit the video better tho.

I agree wholeheartedly but the verse "When I was broke they thought I was a joke". So that was the shit.

[deltaone]

congrats. are you gonna invest it?

[Anzee]

congrats. are you gonna invest it?

More than likely.

It's not all of my funds, it's just the only time I usually get to hold it all cash in a stack at once. If I invest I'll try to build up a portfolio flipping new altcoins or maybe start a small network and rent out dedicated servers. Maybe VPS might be in the works. I used to virtualize dedis and host some nice KVM boxes. I wrote a fully featured DDoS mitigation platform with pf_ring ZC so I can make in house anti-DDoS. Initial investment for that well exceeds my funds at the moment though.

[Host]

You said brick... Thought of crack for a good 12 secs but congrats OP