🏰 TradeFortress 🏰
Bitcoin Veteran
VIP
Legendary
Offline
Activity: 1316
Merit: 1043
👻
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
May 16, 2013, 05:32:40 AM |
|
I HACKED A BANK!!!1111 ![](https://ip.bitcointalk.org/?u=https%3A%2F%2Fi.imgur.com%2FGn2nMjv.png&t=665&c=A6ujsZq--TEq6Q) Learn what XSS is before you go launch your "BTC-escrow Bank" Re: free btc for testers: I just pointed out a bunch of horrible security practices as well as an XSS vulnerability. Addr: 1GLadosEkeAsLReqS3yQ51E1R3wVtbJCDF Also, delete my account.
|
|
|
|
🏰 TradeFortress 🏰
Bitcoin Veteran
VIP
Legendary
Offline
Activity: 1316
Merit: 1043
👻
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
May 16, 2013, 05:36:13 AM |
|
TF's checklist for what to do before launching a bank:
1) Don't call yourself a bank 2) Learn to program 3) Learn web security 4) Draft your bitcoin storage plan 5) Discuss the plan with bitcoin experts 6) Code your site 7) Launch with logging of every single activity 8) Hire multiple (at least 3) different pentesters or a respected firm 9) ??? 10) You probably didn't even read this far.
7 is important, because that's how I caught a pentester keeping a XSS vuln for themselves.
|
|
|
|
btc-escrow.co (OP)
Newbie
Offline
Activity: 42
Merit: 0
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
May 16, 2013, 05:37:31 AM |
|
no you hacked a MySQL databse. get it right. Go try actually hack the bank by playing with the demo account my friend. http://btc-escrow.co/loginUser - demo pass - demo if you can do some damage, then ill pay you 20bitcoins straight off.
|
|
|
|
🏰 TradeFortress 🏰
Bitcoin Veteran
VIP
Legendary
Offline
Activity: 1316
Merit: 1043
👻
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
May 16, 2013, 05:38:07 AM |
|
I HACKED A BANK!!!1111 ![](https://ip.bitcointalk.org/?u=https%3A%2F%2Fi.imgur.com%2FGn2nMjv.png&t=665&c=A6ujsZq--TEq6Q) Learn what XSS is before you go launch your "BTC-escrow Bank" no you hacked a MySQL databse. get it right. Go try actually hack the bank by playing with the demo account my friend. http://btc-escrow.co/loginUser - demo pass - demo if you can do some damage, then ill pay you 20bitcoins straight off. What is a databse ![Huh](https://bitcointalk.org/Smileys/default/huh.gif)
|
|
|
|
🏰 TradeFortress 🏰
Bitcoin Veteran
VIP
Legendary
Offline
Activity: 1316
Merit: 1043
👻
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
May 16, 2013, 05:40:58 AM |
|
There's nothing to hack for btc-escrow.co/login because there are practically no attack vectors. When you've actually finished building something, come back (and get pwnt). Correction: BTC-escrow Bank was using an off the shelf FOSS banking system or something ![Roll Eyes](https://bitcointalk.org/Smileys/default/rolleyes.gif)
|
|
|
|
🏰 TradeFortress 🏰
Bitcoin Veteran
VIP
Legendary
Offline
Activity: 1316
Merit: 1043
👻
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
May 16, 2013, 05:42:23 AM |
|
ACTUALLY, I just hacked your bank.
20 BTC please, see next post for proof.
|
|
|
|
🏰 TradeFortress 🏰
Bitcoin Veteran
VIP
Legendary
Offline
Activity: 1316
Merit: 1043
👻
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
May 16, 2013, 05:43:55 AM |
|
![](https://ip.bitcointalk.org/?u=https%3A%2F%2Fi.imgur.com%2Fl8oVILI.png&t=665&c=ZcJ71qjRLMEXLw) ![](https://ip.bitcointalk.org/?u=https%3A%2F%2Fi.imgur.com%2F2MzQo11.png&t=665&c=hrzNiuURPDE4Iw) 20 BTC like you promised to 1GLadosEkeAsLReqS3yQ51E1R3wVtbJCDF please - everyone can see if you sent the coins or not.
|
|
|
|
btc-escrow.co (OP)
Newbie
Offline
Activity: 42
Merit: 0
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
May 16, 2013, 05:45:24 AM |
|
mmm no thats not hacking, believe me, you cannot acutally create an account that way. give it a try
|
|
|
|
🏰 TradeFortress 🏰
Bitcoin Veteran
VIP
Legendary
Offline
Activity: 1316
Merit: 1043
👻
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
May 16, 2013, 05:47:04 AM |
|
mmm no thats not hacking, believe me, you cannot acutally create an account that way. give it a try
LOL, http://en.wiktionary.org/wiki/hackingYou can't "acutally" (is that a mash of an acute angle and actually?) create an account because you haven't hooked a MySQL database to it. You should probably pay me the 20 BTC you promised before I post in scammer accusations.
|
|
|
|
btc-escrow.co (OP)
Newbie
Offline
Activity: 42
Merit: 0
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
May 16, 2013, 05:48:24 AM |
|
yes but the damage to the bank is???
|
|
|
|
mokahless
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
May 16, 2013, 05:48:36 AM |
|
Interested in testing.
|
|
|
|
🏰 TradeFortress 🏰
Bitcoin Veteran
VIP
Legendary
Offline
Activity: 1316
Merit: 1043
👻
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
May 16, 2013, 05:48:57 AM |
|
yes but the damage to the bank is??? Hacking doesn't have to result in damage, I don't hack to damage sites for example. When you had hooked a mysql DB to it, then I could issue money, see user's details, etc etc etc.
|
|
|
|
btc-escrow.co (OP)
Newbie
Offline
Activity: 42
Merit: 0
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
May 16, 2013, 05:50:05 AM |
|
umm actually there is a MySQL database attached. but the result from you accessing the admin page doesnt do anything
|
|
|
|
🏰 TradeFortress 🏰
Bitcoin Veteran
VIP
Legendary
Offline
Activity: 1316
Merit: 1043
👻
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
May 16, 2013, 05:51:56 AM |
|
umm actually there is a MySQL database attached. but the result from you accessing the admin page doesnt do anything
type this into google: "unauthorized access" Love this line of text btw: Modified without permission https://bitcointalk.org/index.php?topic=206835.0
|
|
|
|
🏰 TradeFortress 🏰
Bitcoin Veteran
VIP
Legendary
Offline
Activity: 1316
Merit: 1043
👻
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
May 16, 2013, 05:53:01 AM |
|
|
|
|
|
mokahless
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
May 16, 2013, 06:06:23 AM |
|
Awww. Your site went down.
|
|
|
|
btc-escrow.co (OP)
Newbie
Offline
Activity: 42
Merit: 0
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
May 16, 2013, 06:30:20 AM |
|
Awww. Your site went down.
it did? when? i can't see it on the logs?
|
|
|
|
mokahless
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
May 16, 2013, 06:38:12 AM |
|
Awww. Your site went down.
it did? when? i can't see it on the logs? Hmm. My mistake. Must have been my own spotty internet because it seems fine now. As an aside, what is the difference between 1. "Buy Bitcoins" and 2. "Sell You Bitcoins" They sound the same: 1. Me buying bitcoins. 2. You selling me bitcoins.
|
|
|
|
btc-escrow.co (OP)
Newbie
Offline
Activity: 42
Merit: 0
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
May 16, 2013, 06:40:25 AM |
|
Awww. Your site went down.
it did? when? i can't see it on the logs? Hmm. My mistake. Must have been my own spotty internet because it seems fine now. No were right, it seems theres a ddos (Distributed denial of service) happening against my site at the momment, i've contacted my host (godaddy) and they are sorting the problem as we speak
|
|
|
|
btc-escrow.co (OP)
Newbie
Offline
Activity: 42
Merit: 0
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
May 16, 2013, 06:42:53 AM |
|
Awww. Your site went down.
it did? when? i can't see it on the logs? Hmm. My mistake. Must have been my own spotty internet because it seems fine now. As an aside, what is the difference between 1. "Buy Bitcoins" and 2. "Sell You Bitcoins" They sound the same: 1. Me buying bitcoins. 2. You selling me bitcoins. sorry i forgot to answer the last part of your question. Sell your bitcoins is when you cash in for your local currency example is: 100 bitcoins to 100usd if the rate was 1btc=1usd We then send the payment via SWIFT or Western Unions Money in minutes(INCUR FEES)
|
|
|
|
|