Bitcoin Forum
December 18, 2017, 11:03:14 PM *
News: Latest stable version of Bitcoin Core: 0.15.1  [Torrent].
 
   Home   Help Search Donate Login Register  
Pages: « 1 2 3 [4] 5 »  All
  Print  
Author Topic: TESTERS NEEDED (BTC-escrow Bank) - FREE BTC FOR TESTERS  (Read 5893 times)
TradeFortress
VIP
Legendary
*
Offline Offline

Activity: 910


View Profile
May 16, 2013, 05:32:40 AM
 #61

I HACKED A BANK!!!1111



Learn what XSS is before you go launch your "BTC-escrow Bank"

Re: free btc for testers: I just pointed out a bunch of horrible security practices as well as an XSS vulnerability.  Addr: 1GLadosEkeAsLReqS3yQ51E1R3wVtbJCDF

Also, delete my account.
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction. Advertise here.
TradeFortress
VIP
Legendary
*
Offline Offline

Activity: 910


View Profile
May 16, 2013, 05:36:13 AM
 #62

TF's checklist for what to do before launching a bank:

1) Don't call yourself a bank
2) Learn to program
3) Learn web security
4) Draft your bitcoin storage plan
5) Discuss the plan with bitcoin experts
6) Code your site
7) Launch with logging of every single activity
8) Hire multiple (at least 3) different pentesters or a respected firm
9) ???
10) You probably didn't even read this far.

7 is important, because that's how I caught a pentester keeping a XSS vuln for themselves.
btc-escrow.co
Jr. Member
*
Offline Offline

Activity: 42


View Profile WWW
May 16, 2013, 05:37:31 AM
 #63

I HACKED A BANK!!!1111



Learn what XSS is before you go launch your "BTC-escrow Bank"

no you hacked a MySQL databse. get it right.

Go try actually hack the bank by playing with the demo account my friend.

http://btc-escrow.co/login

User - demo
pass - demo

if you can do some damage, then ill pay you 20bitcoins straight off.

TradeFortress
VIP
Legendary
*
Offline Offline

Activity: 910


View Profile
May 16, 2013, 05:38:07 AM
 #64

I HACKED A BANK!!!1111



Learn what XSS is before you go launch your "BTC-escrow Bank"

no you hacked a MySQL databse. get it right.

Go try actually hack the bank by playing with the demo account my friend.

http://btc-escrow.co/login

User - demo
pass - demo

if you can do some damage, then ill pay you 20bitcoins straight off.


What is a databse  Huh Huh Huh
TradeFortress
VIP
Legendary
*
Offline Offline

Activity: 910


View Profile
May 16, 2013, 05:40:58 AM
 #65

There's nothing to hack for btc-escrow.co/login because there are practically no attack vectors. When you've actually finished building something, come back (and get pwnt).

Correction: BTC-escrow Bank was using an off the shelf FOSS banking system or something Roll Eyes
TradeFortress
VIP
Legendary
*
Offline Offline

Activity: 910


View Profile
May 16, 2013, 05:42:23 AM
 #66

ACTUALLY, I just hacked your bank.

20 BTC please, see next post for proof.
TradeFortress
VIP
Legendary
*
Offline Offline

Activity: 910


View Profile
May 16, 2013, 05:43:55 AM
 #67





20 BTC like you promised to 1GLadosEkeAsLReqS3yQ51E1R3wVtbJCDF please - everyone can see if you sent the coins or not.
btc-escrow.co
Jr. Member
*
Offline Offline

Activity: 42


View Profile WWW
May 16, 2013, 05:45:24 AM
 #68

mmm no thats not hacking, believe me, you cannot acutally create an account that way. give it a try
TradeFortress
VIP
Legendary
*
Offline Offline

Activity: 910


View Profile
May 16, 2013, 05:47:04 AM
 #69

mmm no thats not hacking, believe me, you cannot acutally create an account that way. give it a try
LOL, http://en.wiktionary.org/wiki/hacking

You can't "acutally" (is that a mash of an acute angle and actually?) create an account because you haven't hooked a MySQL database to it.

You should probably pay me the 20 BTC you promised before I post in scammer accusations.
btc-escrow.co
Jr. Member
*
Offline Offline

Activity: 42


View Profile WWW
May 16, 2013, 05:48:24 AM
 #70

mmm no thats not hacking, believe me, you cannot acutally create an account that way. give it a try
LOL, http://en.wiktionary.org/wiki/hacking

yes but the damage to the bank is???
mokahless
Sr. Member
****
Offline Offline

Activity: 465



View Profile
May 16, 2013, 05:48:36 AM
 #71

Interested in testing.

TradeFortress
VIP
Legendary
*
Offline Offline

Activity: 910


View Profile
May 16, 2013, 05:48:57 AM
 #72

mmm no thats not hacking, believe me, you cannot acutally create an account that way. give it a try
LOL, http://en.wiktionary.org/wiki/hacking

yes but the damage to the bank is???
Hacking doesn't have to result in damage, I don't hack to damage sites for example.

When you had hooked a mysql DB to it, then I could issue money, see user's details, etc etc etc.
btc-escrow.co
Jr. Member
*
Offline Offline

Activity: 42


View Profile WWW
May 16, 2013, 05:50:05 AM
 #73

umm actually there is a MySQL database attached. but the result from you accessing the admin page doesnt do anything
TradeFortress
VIP
Legendary
*
Offline Offline

Activity: 910


View Profile
May 16, 2013, 05:51:56 AM
 #74

umm actually there is a MySQL database attached. but the result from you accessing the admin page doesnt do anything
type this into google: "unauthorized access"

Love this line of text btw: Modified without permission

https://bitcointalk.org/index.php?topic=206835.0
TradeFortress
VIP
Legendary
*
Offline Offline

Activity: 910


View Profile
May 16, 2013, 05:53:01 AM
 #75

mokahless
Sr. Member
****
Offline Offline

Activity: 465



View Profile
May 16, 2013, 06:06:23 AM
 #76

Awww. Your site went down.

btc-escrow.co
Jr. Member
*
Offline Offline

Activity: 42


View Profile WWW
May 16, 2013, 06:30:20 AM
 #77

Awww. Your site went down.

it did? when? i can't see it on the logs?
mokahless
Sr. Member
****
Offline Offline

Activity: 465



View Profile
May 16, 2013, 06:38:12 AM
 #78

Awww. Your site went down.

it did? when? i can't see it on the logs?
Hmm. My mistake. Must have been my own spotty internet because it seems fine now.

As an aside, what is the difference between 1. "Buy Bitcoins" and 2. "Sell You Bitcoins"
They sound the same:
1. Me buying bitcoins.
2. You selling me bitcoins.

btc-escrow.co
Jr. Member
*
Offline Offline

Activity: 42


View Profile WWW
May 16, 2013, 06:40:25 AM
 #79

Awww. Your site went down.

it did? when? i can't see it on the logs?
Hmm. My mistake. Must have been my own spotty internet because it seems fine now.

No were right, it seems theres a ddos (Distributed denial of service) happening against my site at the momment, i've contacted my host (godaddy) and they are sorting the problem as we speak
btc-escrow.co
Jr. Member
*
Offline Offline

Activity: 42


View Profile WWW
May 16, 2013, 06:42:53 AM
 #80

Awww. Your site went down.

it did? when? i can't see it on the logs?
Hmm. My mistake. Must have been my own spotty internet because it seems fine now.

As an aside, what is the difference between 1. "Buy Bitcoins" and 2. "Sell You Bitcoins"
They sound the same:
1. Me buying bitcoins.
2. You selling me bitcoins.

sorry i forgot to answer the last part of your question.

Sell your bitcoins is when you cash in for your local currency example is: 100 bitcoins to 100usd if the rate was 1btc=1usd
We then send the payment via SWIFT or Western Unions Money in minutes(INCUR FEES)
Pages: « 1 2 3 [4] 5 »  All
  Print  
 
Jump to:  

Sponsored by , a Bitcoin-accepting VPN.
Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!