+- Sinisterly (https://sinister.ly)
+-- Forum: General (https://sinister.ly/Forum-General)
+--- Forum: The Lounge (https://sinister.ly/Forum-The-Lounge)
+--- Thread: Just Hacked a PayPal, holy shit. (/Thread-Just-Hacked-a-PayPal-holy-shit)
RE: Just Hacked a PayPal, holy shit. - Frooxius - 02-17-2012
May I ask, what exactly do you mean by "hacked PayPal"? Did you exploit the service itself, to go around authenticating to access someone else's account? Or did you somehow get the password from the user himself (social engineering) or even guessed the password? If it's the former, then why can't you use that exploit again to get access to another account?
I mean... the post is missing a lot of crucial information about what you actually did.
RE: Just Hacked a PayPal, holy shit. - Reverence - 02-17-2012
(02-17-2012, 06:40 PM)Frooxius Wrote: May I ask, what exactly do you mean by "hacked PayPal"? Did you exploit the service itself, to go around authenticating to access someone else's account? Or did you somehow get the password from the user himself (social engineering) or even guessed the password? If it's the former, then why can't you use that exploit again to get access to another account?
I mean... the post is missing a lot of crucial information about what you actually did.
I accessed someone else's account. I think I made it pretty clear in the thread title: "hacked a paypal".
The information was in the image, but 1llusion removed the image.
RE: Just Hacked a PayPal, holy shit. - Frooxius - 02-17-2012
It's not clear at all. What method did you use to hack it? What did the hack involve? Were you able to execute your own code on their server? Or do an SQL injection to modify some query? What exactly did you do?
"Accessing someone's account" or "Hacking something" are very generic terms, as they can mean a lot of specific things and there are several ways to achieve them, so I'm basically asking about the way you used, because at this point, I don't know what you've actually done, besides somehow accessing someone's account.
Information might've been in the image, but since it was you who did this, it should be also in your head right? I mean, you should know what you've actually done to achieve that. That's what I'm asking about.
RE: Just Hacked a PayPal, holy shit. - bluedog.tar.gz - 02-17-2012
(02-17-2012, 06:59 PM)Frooxius Wrote: It's not clear at all. What method did you use to hack it? What did the hack involve? Were you able to execute your own code on their server? Or do an SQL injection to modify some query? What exactly did you do?
"Accessing someone's account" or "Hacking something" are very generic terms, as they can mean a lot of specific things and there are several ways to achieve them, so I'm basically asking about the way you used, because at this point, I don't know what you've actually done, besides somehow accessing someone's account.
Information might've been in the image, but since it was you who did this, it should be also in your head right? I mean, you should know what you've actually done to achieve that. That's what I'm asking about.
Y U SO SMART
![[Image: e189493b036abc631c15614a44070ed1.png]](http://s3.amazonaws.com/ragefaces/e189493b036abc631c15614a44070ed1.png)
RE: Just Hacked a PayPal, holy shit. - Reverence - 02-17-2012
(02-17-2012, 06:59 PM)Frooxius Wrote: It's not clear at all. What method did you use to hack it? What did the hack involve? Were you able to execute your own code on their server? Or do an SQL injection to modify some query? What exactly did you do?
"Accessing someone's account" or "Hacking something" are very generic terms, as they can mean a lot of specific things and there are several ways to achieve them, so I'm basically asking about the way you used, because at this point, I don't know what you've actually done, besides somehow accessing someone's account.
Information might've been in the image, but since it was you who did this, it should be also in your head right? I mean, you should know what you've actually done to achieve that. That's what I'm asking about.
In basic terms accessing someone's account is all I did, though very generic, it sums up what I accomplished.. The point of this thread was to show HC that I successfully hacked a paypal (though proof was removed), not how I did it. However if you would like that information I'm willing to present it to you.
I used SQLi to get into the site and point out security problems to the admin (I'm a gray hat), I couldn't find the admin page so I was about to give up. While looking through the "users" table I saw a column for "E-mail", I viewed the passwords column and the e-mail column and was able to extract and hack into a bunch of e-mails. Then I decided to try out the e-mails and passwords for PayPal, I only accessed one PayPal account. There were approximately 21 e-mails.
RE: Just Hacked a PayPal, holy shit. - Jacob - 02-18-2012
(02-17-2012, 06:45 PM)Strikethrough Wrote:Ironically. I saved the image to my phone last night on accident. Pm me your email address and I can send it to your email from my phone from there you can edit what you need to then re upload it.(02-17-2012, 06:40 PM)Frooxius Wrote: May I ask, what exactly do you mean by "hacked PayPal"? Did you exploit the service itself, to go around authenticating to access someone else's account? Or did you somehow get the password from the user himself (social engineering) or even guessed the password? If it's the former, then why can't you use that exploit again to get access to another account?
I mean... the post is missing a lot of crucial information about what you actually did.
I accessed someone else's account. I think I made it pretty clear in the thread title: "hacked a paypal".
The information was in the image, but 1llusion removed the image.
RE: Just Hacked a PayPal, holy shit. - 1234hotmaster - 02-24-2012
what would you do if the VPN logs were monitored and reported?
RE: Just Hacked a PayPal, holy shit. - W0rM - 02-27-2012
Hacking a Paypal Account or Getting the VIP of {HF-ucked} is not a very hard thing to do
Look here
![[Image: Hehe.gif]](http://i1226.photobucket.com/albums/ee406/msu_roxy/Hehe.gif)
RE: Just Hacked a PayPal, holy shit. - Reverence - 02-28-2012
(02-27-2012, 11:10 AM)W0rM Wrote: Hacking a Paypal Account or Getting the VIP of {HF-ucked} is not a very hard thing to do
Look here
Now where the hell did you get that list? lol.
RE: Just Hacked a PayPal, holy shit. - W0rM - 02-28-2012
(02-28-2012, 01:16 AM)Strikethrough Wrote: Now where the hell did you get that list? lol.
that's my own modified Typical stealer, more infective, spread into USBs, more durable and gets more stuff. and i dont know why the hell i love pdf files that's why i wanted to import the logs via pdf.
That's my own log list in pdf