Bitcoin Forum
May 03, 2024, 05:45:11 AM *
News: Latest Bitcoin Core release: 27.0 [Torrent]
 
   Home   Help Search Login Register More  
Pages: « 1 [2] 3 »  All
  Print  
Author Topic: Pentest Primedice 3 for bounties!  (Read 3505 times)
DeboraMeeks
Hero Member
*****
Offline Offline

Activity: 588
Merit: 500


View Profile
August 04, 2014, 06:04:23 PM
 #21

Me too! Would be interested Smiley
1714715111
Hero Member
*
Offline Offline

Posts: 1714715111

View Profile Personal Message (Offline)

Ignore
1714715111
Reply with quote  #2

1714715111
Report to moderator
1714715111
Hero Member
*
Offline Offline

Posts: 1714715111

View Profile Personal Message (Offline)

Ignore
1714715111
Reply with quote  #2

1714715111
Report to moderator
1714715111
Hero Member
*
Offline Offline

Posts: 1714715111

View Profile Personal Message (Offline)

Ignore
1714715111
Reply with quote  #2

1714715111
Report to moderator
Whoever mines the block which ends up containing your transaction will get its fee.
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction.
BitCoinDream
Legendary
*
Offline Offline

Activity: 2324
Merit: 1204

The revolution will be digital


View Profile
August 04, 2014, 07:29:41 PM
 #22

Our main developer is asleep at the moment, when he's online I'll send some of the people here site/api details.

I might be interested in checking SQL injection.

I'm always up for trying to force data to execute, though IMO, forcing a 100BTC credit to myself is a feature, not a bug. To date, I've only been able to force a small site to accept LTC as BTC, though. Then it was fixed and he never paid the bounty. Cheesy

How come a site accept LTC as BTC ? The Bitcoin daemon is different from the Litecoin daemon. If they check balance to their Bitcoin address that can never be filled with Litecoin !!! I'd like to know what flaw they made... if u please share.

devthedev
Legendary
*
Offline Offline

Activity: 1050
Merit: 1004



View Profile
August 04, 2014, 10:13:40 PM
 #23

Our main developer is asleep at the moment, when he's online I'll send some of the people here site/api details.

I might be interested in checking SQL injection.

It's pretty solid, I don't think you'll find anything in that realm.
Stunna, I've shot you a PM with the results of the pentest.

MICRO
Legendary
*
Offline Offline

Activity: 2464
Merit: 1037


CEO @ Stake.com and Primedice.com


View Profile WWW
August 04, 2014, 10:28:55 PM
 #24

Our main developer is asleep at the moment, when he's online I'll send some of the people here site/api details.

I might be interested in checking SQL injection.

It's pretty solid, I don't think you'll find anything in that realm.
Stunna, I've shot you a PM with the results of the pentest.

Are u tester123 ? Come on pd3 to play around PvP with me.

      ▄▄████████▄▄
   ▄████████████████▄
 ▄█████▀▀       ▀▀████     ████                  ████
▄████▀            ████    ████▌                 ▐████
█████           ▄████▀   ▐████                  ████▌    ▄▄
█████           ▀▀▀▀    ▄█████████▀            ▐████   ▄███▀
 █████▄           ▄▄███████████▀▀   ▄▄▄▄       ████  ▄███▀
   ▀█████▄▄       ▀████▀████▀     ▄████▀███   ▐███████▀▀        ▄▄▄▄
      ▀███████▄        ▐████    ▄████  ▐██▌   ███████        ▄███▀ ██▌
         ▀▀██████▄▄    ████    ▄███▀   ███   ▐███▌███      ▄███▀  ▄██▌
    ▄▄▄▄     ▀▀█████  ▐████    ████   ▄███   ████ ▐███    ▐████▄▄███▀
  █████▀▀      ▀████▌ ▐████▄▄██████▄▄█████▄▄█████  ▀███   ████
 ████▀          ████▌  ▀████▀▀  ▀████▀  ▀██▀ ███▀   ▀███  ▀████▄▄▄▄██
████▌          █████        ▄▄▄▄   ▄▄▄▄▄▄  ▄ ▄▄ ▄ ▄▄ ▀███   ▀▀████▀▀
████▄       ▄▄████▀       ▄█▀   ▀ ▄█▀  ▀█▄ ██▀▀██▀▀██▀███▄▄      ▄▄██
 ██████████████▀▀  ▄███▄  ██▄     ██▄  ▄██ ██  ██  ██   ▀▀█████████▀▀
   ▀██████▀▀▀      ▀███▀   ▀████▀  ▀████▀  ██  ██  ██



▄▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▄
█  ▄▀▄             █▀▀▐▀▄▄
█  █▀█             █  ▐  ▐▌
█       ▄██▄       █  ▌  █
█     ▄██████▄     █  ▌ ▐▌
█    ██████████    █ ▐  █
█   ▐██████████▌   █ ▐ ▐▌
█    ▀▀██████▀▀    █ ▌ █
█     ▄▄▄██▄▄▄     █ ▌▐▌
█                  █▐ █
█                  █▐▐▌
█                  █▐█
▀▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▀█
▄▄█████████▄▄
▄█▀▀▀█████████▀▀▀█▄
▄█▀    ▄▀█████▀     ▀█▄
▄█▄    █        ▀▄   ███▄
▄████▀▀▀▀▄       ▄▀▀▀▀▀███▄
████      ▀▄▄▄▄▄▀       ███
███     ▄▄███████▄▄     ▄▀█
█  ▀▄ ▄▀ ▀███████▀ ▀▄ ▄▀  █
▀█   █     ▀███▀     ▀▄  █▀
▀█▄▄█▄      █        █▄█▀
▀█████▄ ▄▀▀ ▀▀▄▄ ▄▄███▀
▀█████        ████▀
▀▀█▄▄▄▄▄▄▄█▀▀



● OVER 1000 GAMES
● DAILY RACES AND BONUSES
● RAKEBACK & VIP RANKS
● 24/7 LIVE SUPPORT
atinski
Full Member
***
Offline Offline

Activity: 224
Merit: 100

To dare is the price of progress


View Profile WWW
August 04, 2014, 10:36:21 PM
 #25

me too

▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄
PRIMEDICE
The Premier Bitcoin Gambling Experience - PRIMEDICE 3 COMING 9TH AUGUST @PrimeDice
▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀
Kluge
Donator
Legendary
*
Offline Offline

Activity: 1218
Merit: 1015



View Profile
August 05, 2014, 03:20:18 AM
 #26

Our main developer is asleep at the moment, when he's online I'll send some of the people here site/api details.

I might be interested in checking SQL injection.

I'm always up for trying to force data to execute, though IMO, forcing a 100BTC credit to myself is a feature, not a bug. To date, I've only been able to force a small site to accept LTC as BTC, though. Then it was fixed and he never paid the bounty. Cheesy

How come a site accept LTC as BTC ? The Bitcoin daemon is different from the Litecoin daemon. If they check balance to their Bitcoin address that can never be filled with Litecoin !!! I'd like to know what flaw they made... if u please share.
They used deposit accounts which you spent from, which they didn't use a daemon for, just internal accounting. Basically, they accepted everything from their forms as true without checking, but allowed a user to specify "LTC" on a "BTC" form by dinking around with the source html (and they literally used those really obvious currency flags). I had LTC in my account there, so I changed the currency flag from BTC to LTC and was able to spend LTC as if it were valued like BTC. Unfortunately, it was only to buy ads. Cry
2double0
Legendary
*
Offline Offline

Activity: 2618
Merit: 1105


View Profile
August 05, 2014, 08:37:46 AM
 #27

Me 3 interested.
eden1
Member
**
Offline Offline

Activity: 78
Merit: 10

★Bitin.io★ - Instant Exchange


View Profile
August 05, 2014, 05:07:40 PM
 #28

I am interested, u will need someone who is new to Prime-Dice to test the atmosphere of the site

MCM-Mike
Member
**
Offline Offline

Activity: 87
Merit: 10


View Profile
August 07, 2014, 07:45:08 AM
 #29

Do you provide a test/dev-environment in order to pentest it and don't break the production system?
If so I would give it a shot if its worth the try.

some facts about me:
http://bitcloudproject.org/w/User:MCM-Mike
BitCoinDream
Legendary
*
Offline Offline

Activity: 2324
Merit: 1204

The revolution will be digital


View Profile
August 10, 2014, 06:06:38 PM
 #30

Hi Stunna... though i was not among the testers, I have found a small UI bug hat u may consider fixing. When I click on the language drop-down, it does not work. It is only showing English as a fixed option.

cookiemonsterwhat
Sr. Member
****
Offline Offline

Activity: 252
Merit: 250


View Profile
August 11, 2014, 02:42:32 AM
 #31

can we still get rewarded if we found bugs?
nahtnam
Legendary
*
Offline Offline

Activity: 1092
Merit: 1000


nahtnam.com


View Profile WWW
August 11, 2014, 02:45:29 AM
 #32

can we still get rewarded if we found bugs?

Yep. Just email support@primedice.com

If your bug is unique and can be reproduced, you will get a reward!

BitCoinDream
Legendary
*
Offline Offline

Activity: 2324
Merit: 1204

The revolution will be digital


View Profile
August 11, 2014, 03:48:38 PM
 #33

can we still get rewarded if we found bugs?

Yep. Just email support@primedice.com

If your bug is unique and can be reproduced, you will get a reward!

I posted above. The bug has neither been addressed nor I have heard from Stunna. May be he's not checking this thread anymore Cry

Hi Stunna... though i was not among the testers, I have found a small UI bug hat u may consider fixing. When I click on the language drop-down, it does not work. It is only showing English as a fixed option.

nahtnam
Legendary
*
Offline Offline

Activity: 1092
Merit: 1000


nahtnam.com


View Profile WWW
August 11, 2014, 03:49:38 PM
 #34

can we still get rewarded if we found bugs?

Yep. Just email support@primedice.com

If your bug is unique and can be reproduced, you will get a reward!

I posted above. The bug has neither been addressed nor I have heard from Stunna. May be he's not checking this thread anymore Cry

Hi Stunna... though i was not among the testers, I have found a small UI bug hat u may consider fixing. When I click on the language drop-down, it does not work. It is only showing English as a fixed option.

How is that a bug?

I dont think PD has been translated to any other language yet.

BitCoinDream
Legendary
*
Offline Offline

Activity: 2324
Merit: 1204

The revolution will be digital


View Profile
August 11, 2014, 05:40:23 PM
 #35

can we still get rewarded if we found bugs?

Yep. Just email support@primedice.com

If your bug is unique and can be reproduced, you will get a reward!

I posted above. The bug has neither been addressed nor I have heard from Stunna. May be he's not checking this thread anymore Cry

Hi Stunna... though i was not among the testers, I have found a small UI bug hat u may consider fixing. When I click on the language drop-down, it does not work. It is only showing English as a fixed option.

How is that a bug?

I dont think PD has been translated to any other language yet.

When a drop down is not dropping down but showing the down arrow is not a bug ?

0xAli
Member
**
Offline Offline

Activity: 72
Merit: 10

42


View Profile
August 11, 2014, 09:09:10 PM
 #36

I am interested.

Only god can judge me.
cookiemonsterwhat
Sr. Member
****
Offline Offline

Activity: 252
Merit: 250


View Profile
August 11, 2014, 10:39:53 PM
 #37

whats considered as a bug? cause the withdraw gave me 10,000 satoshi is that one?
rz20
Legendary
*
Offline Offline

Activity: 1330
Merit: 1001


View Profile
August 11, 2014, 10:51:35 PM
 #38

I sent and talk to edward about the nonce repeat bug when you make a flood query. It gives to all the bets of the same timestamp the same result. In one run I could get 10 bets with the same result.
MasterOwel
Member
**
Offline Offline

Activity: 98
Merit: 10

Life is my dream, what is yours?


View Profile
August 14, 2014, 12:02:25 AM
 #39

I'm good with patterns and logic errors, meaning if there's an issue with the script that runs the site I could root around it figuring out ways to break the odds.
MICRO
Legendary
*
Offline Offline

Activity: 2464
Merit: 1037


CEO @ Stake.com and Primedice.com


View Profile WWW
August 14, 2014, 12:04:51 AM
 #40

I'm good with patterns and logic errors, meaning if there's an issue with the script that runs the site I could root around it figuring out ways to break the odds.

Site is now live , everybody can pentest it . And if u find any bugs email support@primedice.com , if u are first to report it , u will get bounty .

      ▄▄████████▄▄
   ▄████████████████▄
 ▄█████▀▀       ▀▀████     ████                  ████
▄████▀            ████    ████▌                 ▐████
█████           ▄████▀   ▐████                  ████▌    ▄▄
█████           ▀▀▀▀    ▄█████████▀            ▐████   ▄███▀
 █████▄           ▄▄███████████▀▀   ▄▄▄▄       ████  ▄███▀
   ▀█████▄▄       ▀████▀████▀     ▄████▀███   ▐███████▀▀        ▄▄▄▄
      ▀███████▄        ▐████    ▄████  ▐██▌   ███████        ▄███▀ ██▌
         ▀▀██████▄▄    ████    ▄███▀   ███   ▐███▌███      ▄███▀  ▄██▌
    ▄▄▄▄     ▀▀█████  ▐████    ████   ▄███   ████ ▐███    ▐████▄▄███▀
  █████▀▀      ▀████▌ ▐████▄▄██████▄▄█████▄▄█████  ▀███   ████
 ████▀          ████▌  ▀████▀▀  ▀████▀  ▀██▀ ███▀   ▀███  ▀████▄▄▄▄██
████▌          █████        ▄▄▄▄   ▄▄▄▄▄▄  ▄ ▄▄ ▄ ▄▄ ▀███   ▀▀████▀▀
████▄       ▄▄████▀       ▄█▀   ▀ ▄█▀  ▀█▄ ██▀▀██▀▀██▀███▄▄      ▄▄██
 ██████████████▀▀  ▄███▄  ██▄     ██▄  ▄██ ██  ██  ██   ▀▀█████████▀▀
   ▀██████▀▀▀      ▀███▀   ▀████▀  ▀████▀  ██  ██  ██



▄▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▄
█  ▄▀▄             █▀▀▐▀▄▄
█  █▀█             █  ▐  ▐▌
█       ▄██▄       █  ▌  █
█     ▄██████▄     █  ▌ ▐▌
█    ██████████    █ ▐  █
█   ▐██████████▌   █ ▐ ▐▌
█    ▀▀██████▀▀    █ ▌ █
█     ▄▄▄██▄▄▄     █ ▌▐▌
█                  █▐ █
█                  █▐▐▌
█                  █▐█
▀▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▀█
▄▄█████████▄▄
▄█▀▀▀█████████▀▀▀█▄
▄█▀    ▄▀█████▀     ▀█▄
▄█▄    █        ▀▄   ███▄
▄████▀▀▀▀▄       ▄▀▀▀▀▀███▄
████      ▀▄▄▄▄▄▀       ███
███     ▄▄███████▄▄     ▄▀█
█  ▀▄ ▄▀ ▀███████▀ ▀▄ ▄▀  █
▀█   █     ▀███▀     ▀▄  █▀
▀█▄▄█▄      █        █▄█▀
▀█████▄ ▄▀▀ ▀▀▄▄ ▄▄███▀
▀█████        ████▀
▀▀█▄▄▄▄▄▄▄█▀▀



● OVER 1000 GAMES
● DAILY RACES AND BONUSES
● RAKEBACK & VIP RANKS
● 24/7 LIVE SUPPORT
Pages: « 1 [2] 3 »  All
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!