Post: Demon Forums *sigh*
11-08-2016, 12:52 AM #1
TeOz
The God of Fridges
(adsbygoogle = window.adsbygoogle || []).push({}); Hey,

Some of you know me, some don't. I've been around for many, many years and I've seen many things. Finally decided to move on with my life, settle down, get a missus, start pushing my career... but no. Out of the blue I get a call from an old friend who tried to purchase a site saying the admins scammed him for $100. I'm a nice guy at heart and I've done some hacking in the past, so I thought why not, let's see what I can dig up. The site in question is ofcourse DemonForums ran by a teenage scottish lad who goes by the alias of Nova among others I'm not going to disclose. Neither am I going to dox the wee lad, because it's not my style.

It was running MyBB. I've actually auditted MyBB in the past so I know a few tricks with it, including an object injection vuln in the Admin panel funnily enough. Good times. Long story short, the Site is dumped and my friend now has the copy of the site he payed for. I got bored one night and decided to do some digging through the DB and see what this "Nova" kid really was like... turns out this isn't the first guy he's scammed and the more I kept looking the worse it got.

Not only is he stupid enough to brag about everything he does... but he does it all in PMs which are stored in a database for people like me to look at. I'm not going to bore you all with the details, I cba and you cba reading it all anyway. So instead I'm going to drop an attachment of PMs between Nova and some wannabe blackhat gfx artist who greps for passwords. For some of you it'll be hilarious

Obviously after finding this shit out, I got access into as much as possible and logged everything. I've tried telling you all before, but I think every now and then you all seem to forget and have to be reminded. Carding is bad, Scamming is bad. If you do either of these things... you are a bad person. You're not hackers because you grep DB entries from other people's dumps and use wordlists to crack (yes crack! not decrypt) hashes.

Feel free to make a fool out of Nova on my behalf. Ohh and shoutout to the old PS guys I haven't seen in ages and all my old friends. If you want to stay in contact with me, let me know because I will be gone again really soon :p

You must login or register to view this content.
Last edited by TeOz ; 11-08-2016 at 12:57 AM.

The following 8 users say thank you to TeOz for this useful post:

BurtE, Father Luckeyy, Hydrogen, OfficialJesseP, Placid, Dacoco, Kronos, Tustin
11-12-2016, 12:31 PM #11
Joel
[move]Sal:madsal::laim:[/move]
Thanks, added to my 80 GB database collection.

Copyright © 2024, NextGenUpdate.
All Rights Reserved.

Gray NextGenUpdate Logo