User Controls
Thanked Posts by MrHigh
-
2017-03-26 at 6:10 AM UTC in Over 6,000,000 SSN hacked from 10 websites by MrHighThe following users say it would be alright if the author of this post didn't die in a fire!
-
2017-03-24 at 4:31 AM UTC in LIVE HACK with Mr High(Security Hole Is Still Open!)This is a live security hole in a fishing license website. I am going to give exact instructions on how to pull personal information out of this website. This security hole is a very easy one and doesn't require any special software. All you need is a browser.
The website is https://wvhunt.com
0. Register an account. This doesn't require an email address to verify. Make sure to remember your login and password because you will have to login after making the account.
1. Click on the View Order History button from the main menu.
2. Change the number in the URL to a different number.
3. Keep changing it if it does not reveal any license information.
4. Click on any of the Select buttons.
5. Click the Home button. You will notice that the name on the right side is now a different person's name.
Sometimes the last step will take you directly into the registration area. You will see the person's date of birth. After clicking the next button you will see their social security number.
If you look at the source code you will be able to see the person's driver's license information and other personal information.
I obtained these quantities from this.
SSN = 132,624
DL = 256,568
This site may be monitored. They caught on to my last hack and I was hacking this site beforehand. They may know about it. But the security hole is still open as of right now.The following users say it would be alright if the author of this post didn't die in a fire! -
2017-03-15 at 6:12 AM UTC in Over 6,000,000 SSN hacked from 10 websites by MrHighI found an easy security issue in a network of websites and was able to obtain over six million names, dob, and ssn. In the midst of pulling the data from the servers the admin must have noticed a large number of requests and investigated. The admin banned all of my accounts and fix the error. I estimate that it would have been over 10 million. I got over half of what I expected. I have not contacted the admin yet. I am going to wait and see if the US government announces it to the public. These were all government websites and most ended with .gov. The people were ordinary citizens using a certain service.
These are the totals from each state.
Alabama = 1,394,018
Arizona = 891,820
Arkansas = 597,242
Delaware = 236,293
Idaho = 151,992
Illinois = 1,235,564
Kansas = 647,230
Maine = 283,558
Oklahoma = 862,278
Vermont = 183,536
I know of several other security holes in government websites. That is all for now.
Your dearest friend,
MrHigh