User Controls
LIVE HACK with Mr High(Security Hole Is Still Open!)
-
2017-03-24 at 4:31 AM UTCThis is a live security hole in a fishing license website. I am going to give exact instructions on how to pull personal information out of this website. This security hole is a very easy one and doesn't require any special software. All you need is a browser.
The website is https://wvhunt.com
0. Register an account. This doesn't require an email address to verify. Make sure to remember your login and password because you will have to login after making the account.
1. Click on the View Order History button from the main menu.
2. Change the number in the URL to a different number.
3. Keep changing it if it does not reveal any license information.
4. Click on any of the Select buttons.
5. Click the Home button. You will notice that the name on the right side is now a different person's name.
Sometimes the last step will take you directly into the registration area. You will see the person's date of birth. After clicking the next button you will see their social security number.
If you look at the source code you will be able to see the person's driver's license information and other personal information.
I obtained these quantities from this.
SSN = 132,624
DL = 256,568
This site may be monitored. They caught on to my last hack and I was hacking this site beforehand. They may know about it. But the security hole is still open as of right now. -
2017-03-24 at 4:39 AM UTCGood job West Virginia DNR. You are literally retarded. I bet it'd be pretty easy to write a script to automate the gathering of the information you are after.
-
2017-03-24 at 4:54 AM UTCWow. If I were behind 7 proxies, then I would totally utilize this 1337 h4x.
-
2017-03-24 at 5:01 AM UTCterrible.
-
2017-03-24 at 5:47 AM UTC
-
2017-03-24 at 7:16 AM UTCGood Lord.
-
2017-03-24 at 9:48 AM UTC
Originally posted by MrHigh I already did.
ZeroBin it.
http://2pdkdy3eo552mpiz.onion/
And send me a PM. -
2017-03-24 at 12:04 PM UTCOh yeah gape that hole
-
2017-03-24 at 9:40 PM UTCfail
-
2017-03-24 at 10:02 PM UTC
-
2017-03-24 at 11:48 PM UTC
Originally posted by -SpectraL Honey pot alert.
https://en.wikipedia.org/wiki/Honeypot_(computing)
Interfering with a federal investigative honeypot is serious crime. -
2017-04-06 at 11:20 PM UTCThis must have been available for a long time. I looked up on it one week after talking about it and it was still working. It seems like it may have been patched now.
http://pwoah7foa6au2pul.onion/forum/index.php?threads/free-social-security-numbers-from-wvhunt-com.139665/#post-1274063 -
2017-04-07 at 12:19 AM UTCwee i can hack im not mean but your wack.