Exploits and Vulnerabilities Section

[Elliot305]

There are various levels of members here and I'm looking to connect with legit players that are of like-mind. Posting a method, thought-process or past experience I've had in the "Making Money" section is just too vague in my opinion. At least with a section dedicated to exploits and vulnerabilities, you're entering that area knowing what you'll get and I think it would really help with fostering productive conversations. Personally, I would love to discuss strategies and thought-processes of potential vulnerabilities and how to go about taking advantage of them. Heck, I'd be willing to moderate such a section too as I deal solely in these areas and haven't had a normal job in 13 years because of my expertise with them. In closing, I would love to see such a section here and think the value it would bring in getting people to think outside-the-box would be immense.

 

[pxoxrxn]

Heck, I'd be willing to moderate such a section

So you're volunteering to moderate a non-existent section on a forum that actively discourages this sort of behaviour?

 

[Elliot305]

a forum that actively discourages this sort of behaviour?

LOL, if that's how you interpret it.

 

[TheMasterOfMoney]

 

[pxoxrxn]

LOL, if that's how you interpret it.

We are web masters here and people like you are our enemy. Most people here just want to make and rank websites, not ruin some else's day with out exploits. if you want to discuss that shit then go to a forum that is more accepting of it because you won't fit in here.

 

[Deleted member 708208]

I am not judging your character based on making money with exploits, but the forum heavily leans towards
building profitable business models and trying to protect them from exploits. Not to mention that section would
become a regular resource for companies to check and secure any glitches in their business models.

 

[Nut-Nights]

+1 for this suggestion, Its good to have exploits section. People saying "you are destroying bla bla" are just looking for thanks. Its BHW.

 

[pxoxrxn]

+1 for this suggestion, Its good to have exploits section. People saying "you are destroying bla bla" are just looking for thanks. Its BHW.

lol you're joking right? No one cares about 'thanks' for starters, you can't buy a new car with 'thanks'. Secondly, blackhat means blackhat SEO in this context, not ruining other poeple's websites.

 

[Repulsor]

lol you're joking right? No one cares about 'thanks' for starters, you can't buy a new car with 'thanks'. Secondly, blackhat means blackhat SEO in this context, not ruining other poeple's websites.

If you keep your wallet open to the public, one of them is going to take a handful out of it.

In your point of view it seems to be the fault of the public and they should get better.

But in my point of view, its our fault thatkeep your wallet open. Not saying we are going to hack every other guys websites. Every single one of them here will try to run an exploit if someone found a loophole in Facebook,G+ or whatever.

Way better than getting the site wiped off by a Nigerian hacker anyway.

 

[WPRipper]

No way ur gonna see this section here.

First, ur talking about flaws in a CMS or online platforms, which will bring us in the h@acking area. AND talking about them on public is not a smart move.

Second, BHW is about SEO, content strategy, money making methods and so on. How can a section like this will fit in here?

Third. If this section will be allowed imagine how many kids will join BHW to offer their services.

IMHO it's a pain in the a$$.

 

[jazzc]

If you read the rules, it says something about "hacking" and "prohibited"...

 

[hotdew]

I think the BH part of BHW misleads a ton of people. Sure, there are a few of us here who make a living from making people's financial lives miserably. I think the vast majority of people here are all about making money the legit way with a respectable dose of hardwork.

So if we were to do a show of hands, I'm not going to support the idea, and I'm sure the idea will fall through.

 

[Society Girl]

I'd love to see it. It doesn't have to be hacking or anything necessarily bad or illegal, just showing what is wrong with some systems. I mean, this is a public forum indexed by Google, this isn't about trading secrets and hacking into anywhere and stealing $947673773.

I come across bugs/flaws/exploits all the time and it'd be good to show what's going on or even old exploits that HAVE been there in the past and discuss why they're there and how to fix future things like it.
I think that while this is an SEO and marketing forum, it may not be right for BHW but I don't feel it should be banned or a taboo subject.

Also, I don't like the word "hacking" being used as if It's illegal or either. Hacking is a brilliant way to use websites, software or even devices in a way that they were not maybe made for. What you do with those hacks may be illegal but hacking is just being creative. Life hacks for example.
Hacking is not some disgusting word that needs to be avoided, It's just the way It's portrayed, mainly by the media.

TLDR: I'd love to see it, but is it for BHW? Maybe not. If it was was to go through, I think It'd only be a matter of time before "Xbox section!" and "CHICKEN SECTION!!11" requests start coming in.

 

[Gogol]

Well, I am from ethical hacking background too, but as per rules, we are not allowed to discuss these things over here. I personally think that bhw administration could allow ethical hacking but I am not sure if they will. This forum is my virtual home, so I am not gonna do something silly that hurts the community. We do have a lot of alternatives anyway..

 

[phatzilla]

Want to buy/sell nice active exploits? check the deep web ;P

The only useful reasons to post exploits here would be to have them eliminated and/or drum up some business for yourself

 

[Gogol]

But dude, you know it better than me... Ethical hacking is so much better than getting hacked. Think about it. Rules are meant to be revised atleast...

If you read the rules, it says something about "hacking" and "prohibited"...

 

[jazzc]

But dude, you know it better than me... Ethical hacking is so much better than getting hacked. Think about it. Rules are meant to be revised atleast...

The so called "ethical hacking" is the politically correct term for the same thing, used to "legitimize" an industry to the public opinion. Hacking in itself is a value-free act. Its use is what determines the "good" or "bad" characterization of the action.

You can't discuss hacking innoculating it from action. "Here's a remote execution PoC for the latest WP, check out my code which I release for educational purposes only" - Riiiight.

 

[Gogol]

 

[jazzc]

 

[Gogol]

but this is a part of how they hack right? Couldn't we open a sub-forum in programming section and move the related topics then? Vulnerability finding might be a hobby, but getting hacked certainly isn't IMHO. Some information on Web security could certainly help.

This discussion is allowed, and its a simple one. Update, don't use cracked software, secure your credentials, don't connect over untrusted networks, use plugins that help with security.


Discussing about how to combing timing attacks with weak prngs across different software that are on the same server to get remote execution isn't exactly going to help any IMer trying to secure his site. Vulnerability finding is a nice hobby (and the more exotic, the better), but this is not the forum for this kind of things.

Well I might do that. Especially, PPI is directly related to getting HACKED. I mean, why would a normal user let a software install another software silently? Wtf? Still, we do not have any policy agianst it, as it seems to me reading the T & C. I guess this is as serious as cookie stuffing. As for SEO, search engines directly get affected, unlike end users..in PPI/PPD cases. Anything unethical should be called unethical. Be it in medical science, or.. in seo. That should not prevent us to discuss about the topic itself(and ofcourse, we are not gonna discuss post mortem over here).

Feel free to open a suggestion thread. Hacking is not allowed no matter if you use it for PPI, CPA, SEO etc. You can do all of these without hacking. Or should we ban SEO too?

I have darknet for that. I am a concerned person. Not everyone ( especially the one who is starting it ) is as concerned. Why should we care about the n00bs? Because as some point, we all were n00bs lol.

Feel free to contact one of the reputable 0-day aggregation "ethical hacking" companies. They'll be happy to fulfil your request for a sizable fee.

Edit: PLease excuse my grammer.English is not a natural language for me