Bitcoin Forum
March 28, 2024, 10:30:27 AM *
News: Latest Bitcoin Core release: 26.0 [Torrent]
 
   Home   Help Search Login Register More  
Pages: « 1 2 3 [4] 5 »  All
  Print  
Author Topic: TESTERS NEEDED (BTC-escrow Bank) - FREE BTC FOR TESTERS  (Read 6042 times)
🏰 TradeFortress 🏰
Bitcoin Veteran
VIP
Legendary
*
Offline Offline

Activity: 1302
Merit: 1042

👻


View Profile
May 16, 2013, 05:32:40 AM
 #61

I HACKED A BANK!!!1111



Learn what XSS is before you go launch your "BTC-escrow Bank"

Re: free btc for testers: I just pointed out a bunch of horrible security practices as well as an XSS vulnerability.  Addr: 1GLadosEkeAsLReqS3yQ51E1R3wVtbJCDF

Also, delete my account.
1711621827
Hero Member
*
Offline Offline

Posts: 1711621827

View Profile Personal Message (Offline)

Ignore
1711621827
Reply with quote  #2

1711621827
Report to moderator
1711621827
Hero Member
*
Offline Offline

Posts: 1711621827

View Profile Personal Message (Offline)

Ignore
1711621827
Reply with quote  #2

1711621827
Report to moderator
1711621827
Hero Member
*
Offline Offline

Posts: 1711621827

View Profile Personal Message (Offline)

Ignore
1711621827
Reply with quote  #2

1711621827
Report to moderator
The grue lurks in the darkest places of the earth. Its favorite diet is adventurers, but its insatiable appetite is tempered by its fear of light. No grue has ever been seen by the light of day, and few have survived its fearsome jaws to tell the tale.
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction.
1711621827
Hero Member
*
Offline Offline

Posts: 1711621827

View Profile Personal Message (Offline)

Ignore
1711621827
Reply with quote  #2

1711621827
Report to moderator
1711621827
Hero Member
*
Offline Offline

Posts: 1711621827

View Profile Personal Message (Offline)

Ignore
1711621827
Reply with quote  #2

1711621827
Report to moderator
1711621827
Hero Member
*
Offline Offline

Posts: 1711621827

View Profile Personal Message (Offline)

Ignore
1711621827
Reply with quote  #2

1711621827
Report to moderator
🏰 TradeFortress 🏰
Bitcoin Veteran
VIP
Legendary
*
Offline Offline

Activity: 1302
Merit: 1042

👻


View Profile
May 16, 2013, 05:36:13 AM
 #62

TF's checklist for what to do before launching a bank:

1) Don't call yourself a bank
2) Learn to program
3) Learn web security
4) Draft your bitcoin storage plan
5) Discuss the plan with bitcoin experts
6) Code your site
7) Launch with logging of every single activity
8) Hire multiple (at least 3) different pentesters or a respected firm
9) ???
10) You probably didn't even read this far.

7 is important, because that's how I caught a pentester keeping a XSS vuln for themselves.
btc-escrow.co (OP)
Newbie
*
Offline Offline

Activity: 42
Merit: 0


View Profile WWW
May 16, 2013, 05:37:31 AM
 #63

I HACKED A BANK!!!1111

https://i.imgur.com/Gn2nMjv.png

Learn what XSS is before you go launch your "BTC-escrow Bank"

no you hacked a MySQL databse. get it right.

Go try actually hack the bank by playing with the demo account my friend.

http://btc-escrow.co/login

User - demo
pass - demo

if you can do some damage, then ill pay you 20bitcoins straight off.

🏰 TradeFortress 🏰
Bitcoin Veteran
VIP
Legendary
*
Offline Offline

Activity: 1302
Merit: 1042

👻


View Profile
May 16, 2013, 05:38:07 AM
 #64

I HACKED A BANK!!!1111



Learn what XSS is before you go launch your "BTC-escrow Bank"

no you hacked a MySQL databse. get it right.

Go try actually hack the bank by playing with the demo account my friend.

http://btc-escrow.co/login

User - demo
pass - demo

if you can do some damage, then ill pay you 20bitcoins straight off.


What is a databse  Huh Huh Huh
🏰 TradeFortress 🏰
Bitcoin Veteran
VIP
Legendary
*
Offline Offline

Activity: 1302
Merit: 1042

👻


View Profile
May 16, 2013, 05:40:58 AM
 #65

There's nothing to hack for btc-escrow.co/login because there are practically no attack vectors. When you've actually finished building something, come back (and get pwnt).

Correction: BTC-escrow Bank was using an off the shelf FOSS banking system or something Roll Eyes
🏰 TradeFortress 🏰
Bitcoin Veteran
VIP
Legendary
*
Offline Offline

Activity: 1302
Merit: 1042

👻


View Profile
May 16, 2013, 05:42:23 AM
 #66

ACTUALLY, I just hacked your bank.

20 BTC please, see next post for proof.
🏰 TradeFortress 🏰
Bitcoin Veteran
VIP
Legendary
*
Offline Offline

Activity: 1302
Merit: 1042

👻


View Profile
May 16, 2013, 05:43:55 AM
 #67





20 BTC like you promised to 1GLadosEkeAsLReqS3yQ51E1R3wVtbJCDF please - everyone can see if you sent the coins or not.
btc-escrow.co (OP)
Newbie
*
Offline Offline

Activity: 42
Merit: 0


View Profile WWW
May 16, 2013, 05:45:24 AM
 #68

mmm no thats not hacking, believe me, you cannot acutally create an account that way. give it a try
🏰 TradeFortress 🏰
Bitcoin Veteran
VIP
Legendary
*
Offline Offline

Activity: 1302
Merit: 1042

👻


View Profile
May 16, 2013, 05:47:04 AM
 #69

mmm no thats not hacking, believe me, you cannot acutally create an account that way. give it a try
LOL, http://en.wiktionary.org/wiki/hacking

You can't "acutally" (is that a mash of an acute angle and actually?) create an account because you haven't hooked a MySQL database to it.

You should probably pay me the 20 BTC you promised before I post in scammer accusations.
btc-escrow.co (OP)
Newbie
*
Offline Offline

Activity: 42
Merit: 0


View Profile WWW
May 16, 2013, 05:48:24 AM
 #70

mmm no thats not hacking, believe me, you cannot acutally create an account that way. give it a try
LOL, http://en.wiktionary.org/wiki/hacking

yes but the damage to the bank is???
mokahless
Sr. Member
****
Offline Offline

Activity: 471
Merit: 256



View Profile
May 16, 2013, 05:48:36 AM
 #71

Interested in testing.

🏰 TradeFortress 🏰
Bitcoin Veteran
VIP
Legendary
*
Offline Offline

Activity: 1302
Merit: 1042

👻


View Profile
May 16, 2013, 05:48:57 AM
 #72

mmm no thats not hacking, believe me, you cannot acutally create an account that way. give it a try
LOL, http://en.wiktionary.org/wiki/hacking

yes but the damage to the bank is???
Hacking doesn't have to result in damage, I don't hack to damage sites for example.

When you had hooked a mysql DB to it, then I could issue money, see user's details, etc etc etc.
btc-escrow.co (OP)
Newbie
*
Offline Offline

Activity: 42
Merit: 0


View Profile WWW
May 16, 2013, 05:50:05 AM
 #73

umm actually there is a MySQL database attached. but the result from you accessing the admin page doesnt do anything
🏰 TradeFortress 🏰
Bitcoin Veteran
VIP
Legendary
*
Offline Offline

Activity: 1302
Merit: 1042

👻


View Profile
May 16, 2013, 05:51:56 AM
 #74

umm actually there is a MySQL database attached. but the result from you accessing the admin page doesnt do anything
type this into google: "unauthorized access"

Love this line of text btw: Modified without permission

https://bitcointalk.org/index.php?topic=206835.0
🏰 TradeFortress 🏰
Bitcoin Veteran
VIP
Legendary
*
Offline Offline

Activity: 1302
Merit: 1042

👻


View Profile
May 16, 2013, 05:53:01 AM
 #75

mokahless
Sr. Member
****
Offline Offline

Activity: 471
Merit: 256



View Profile
May 16, 2013, 06:06:23 AM
 #76

Awww. Your site went down.

btc-escrow.co (OP)
Newbie
*
Offline Offline

Activity: 42
Merit: 0


View Profile WWW
May 16, 2013, 06:30:20 AM
 #77

Awww. Your site went down.

it did? when? i can't see it on the logs?
mokahless
Sr. Member
****
Offline Offline

Activity: 471
Merit: 256



View Profile
May 16, 2013, 06:38:12 AM
 #78

Awww. Your site went down.

it did? when? i can't see it on the logs?
Hmm. My mistake. Must have been my own spotty internet because it seems fine now.

As an aside, what is the difference between 1. "Buy Bitcoins" and 2. "Sell You Bitcoins"
They sound the same:
1. Me buying bitcoins.
2. You selling me bitcoins.

btc-escrow.co (OP)
Newbie
*
Offline Offline

Activity: 42
Merit: 0


View Profile WWW
May 16, 2013, 06:40:25 AM
 #79

Awww. Your site went down.

it did? when? i can't see it on the logs?
Hmm. My mistake. Must have been my own spotty internet because it seems fine now.

No were right, it seems theres a ddos (Distributed denial of service) happening against my site at the momment, i've contacted my host (godaddy) and they are sorting the problem as we speak
btc-escrow.co (OP)
Newbie
*
Offline Offline

Activity: 42
Merit: 0


View Profile WWW
May 16, 2013, 06:42:53 AM
 #80

Awww. Your site went down.

it did? when? i can't see it on the logs?
Hmm. My mistake. Must have been my own spotty internet because it seems fine now.

As an aside, what is the difference between 1. "Buy Bitcoins" and 2. "Sell You Bitcoins"
They sound the same:
1. Me buying bitcoins.
2. You selling me bitcoins.

sorry i forgot to answer the last part of your question.

Sell your bitcoins is when you cash in for your local currency example is: 100 bitcoins to 100usd if the rate was 1btc=1usd
We then send the payment via SWIFT or Western Unions Money in minutes(INCUR FEES)
Pages: « 1 2 3 [4] 5 »  All
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!