[darkguide]

Hello guys,
Recently ...2023 this game www.talismanonline.com that has a support page www.miragame.com was hacked. Hackers managed to acess DB, prior to that it was hacked also, as you can check here https://www.youtube.com/@prometheus847(this guy did it and posted some vids).
Ive lost over 3kUSD and the support wont do anything to recover my things online so ive been diggin into website, and i am in need for some guidance.
Ive ran nikto scans , tried to reach their mysql(unauthorized), nmap scans . zap scans with diverse flaws , looked for s3 buckets and i just cant find the path.

Would like to know if someone could help me so they pay for the damage they did, they acting like mercenary and my CC provider say they cant refund thing cause had been to long.

Thanks in advanced

[pwningtheunpwned]

Have you tried sqlmapping all their parameters and forms? I'd recommend running sqlmap on the POST request data you found on ZAP, forms with --forms (it's simple) and on parameters. Have you tried to perform web enumeration with gobuster and dirb for maximal results? If an admin page was found, consider brute forcing it and using sqlmap first.

Have you tried doing recon on their CMS (if they have one)? Have you tried further enumerating the gobuster results if the scans were done to find the versioning of the software used to find a possible exploit?

[Bshol]

You can target other domains that are hosted on the same server with that platform.

[ciadiscret]

Hello guys,
Recently ...2023 this game www.talismanonline.com that has a support page www.miragame.com was hacked. Hackers managed to acess DB, prior to that it was hacked also, as you can check here https://www.youtube.com/@prometheus847(this guy did it and posted some vids).
Ive lost over 3kUSD and the support wont do anything to recover my things online so ive been diggin into website, and i am in need for some guidance.
Ive ran nikto scans , tried to reach their mysql(unauthorized), nmap scans . zap scans with diverse flaws , looked for s3 buckets and i just cant find the path.

Would like to know if someone could help me so they pay for the damage they did, they acting like mercenary and my CC provider say they cant refund thing cause had been to long.

Thanks in advanced

your service, yu wanna hack ?? explain me, the job to do , im ready

[binxzzz]

i have a lot of websites need hackers to attack!
i will pay via BTC! for me contact of u !

---

You can target other domains that are hosted on the same server with that platform.

i have a lot of websites need hackers to attack!
i will pay via BTC! for me contact of u !