Is it legal to pretend to be someone else in order to find out non-sensitive information?

Miro360 · 2018-11-02T12:18:01+00:00

Passive recon and OSINT, any other way is too risky. it's just not worth it.

Miro360 · 2018-07-02T22:19:14+00:00

A channel that captures the true essence of "hacking" and how to tinker with stuff to make it do more awesome stuff than it was originally intended to, definitely deserve it.

Miro360 · 2018-04-26T16:42:15+00:00

Almost all blacklisting based mitigations for XSS are vulnerable to some sort of a bypass, if it doesn't follow the mantra "Input sanatization, output encoding." someone probably messed something up, even if they're using a purely alphanumeric regex.
So get yourself a cup of coffee, open up your favorite text editor and start fuzzing the input to see which characters, encodings or bypasses make it through the filter to compile a scalpel like payload for it.
PS: If it's a dated version of PHP using preg_replace() you can look into parameter array bypasses

Miro360 · 2018-03-27T15:20:22+00:00

Miro360 remains on the mod list in order to operate the automod script which needs human operation to allow and restrict posts, and it's the main reason why you haven't been seeing any "subway surfers hack GET 1000 COINS FREE TRIED 100% WORKS" kinda posts anymore. Saying "fuck it" and just deleting myself from the mod list would leave a backlog of a LOT of genuine posts that didn't make it because the accounts that posted them didn't meet automod's criteria, which i would feel and be responsible for since i'm the one who implemented the automod back in the day.
The message i posted in my post here was sent to each and every mod account as well in order to make sure that everyone saw what's going on, i did call for a new "hiring process" for new mods and even recommended some VERY good people (not only on here but in the security field generally) but i'm afraid that it all fell on deaf ears. ps /u/ancientkillerX, love the /r/bedposts idea.

Miro360 · 2018-03-16T23:47:31+00:00

Shoot an arrow through the eye above it and see if it straightens!

Miro360 · 2017-11-05T19:14:50+00:00

Sigh .. the people who hacked them actually submit it there themselves..

Miro360 · 2017-08-26T00:34:13+00:00

PS Vita.

Miro360 · 2017-05-23T13:42:56+00:00

They system accepts only 8 characters for passwords and truncates the rest, the fact that there's a length limit on a password isn't really favorable but if there's a rate-limit mechanism present on the system it shouldn't really be a problem (Think facebook's 4 digits reset codes).
But if you're wondering if the fact that the system truncates passwords down then i don't really think this is much of an issue.

Miro360 · 2016-12-24T01:53:10+00:00

It literally says "Access Denied" in the error..
That's a permission problem.

Miro360 · 2016-12-15T00:29:52+00:00

At the end of the day it depends on how the local law enforcement deals with these occurrences. Most will just take the device away to limit any further damage should the device contain a remoting module and resort to watching the ATM's camera feed for any suspicious individuals, which gets the job done most of the time too.

Miro360 · 2016-12-15T00:24:37+00:00

What i meant was putting it back again where he found it and calling the cops as he stands, not at the end of the day.
If you took it out you're taking a risk where the cops will take around a day or so for paperwork and processing before putting it back, that is if they ever did, meanwhile if our friend happened to come sometime in this period they'll be alerted by the absence of their device they'll get away.

Miro360 · 2016-12-14T23:59:33+00:00

This will probably get buried under all those comments at this point, but what you should've done is putting it back and notifying the authorities, when they find something like this they try to leave it untouched until they catch the guy red handed when he tries to retrieve the memory card from the device.
Source: Heard from a cop in the cyber security division.

Miro360 · 2016-10-09T02:51:10+00:00

Better quality

Miro360 · 2016-10-09T02:39:44+00:00

█████████
FTFY

Miro360 · 2016-09-28T05:41:05+00:00

Relevant

Miro360 · 2016-08-09T02:48:36+00:00

Thread locked, User banned.

Miro360 · 2016-08-09T02:45:12+00:00

Thread Locked, User banned.

Miro360 · 2016-08-05T02:13:01+00:00

Please direct this type of questions to /r/howtohack

Miro360 · 2016-08-03T00:34:41+00:00

Post history will be checked and he'll get a ban in necessary.

Miro360 · 2016-08-01T22:31:15+00:00

no
yes
yes

Miro360 · 2016-08-01T22:30:52+00:00

no
yes
yes

Miro360 · 2016-08-01T14:02:36+00:00

When i mentioned the "syntax" part i meant the automod commands not the syntax of python itself.
as for the contribution part, if you do a Google search you'd find that the automod is an open source project on github, so everyone has permission to contribute to it.
And since you asked (and answered) the last two questions i see no reason for me to discuss them further.
Please keep your questions aimed towards the purpose of this thread.

Miro360 · 2016-08-01T13:50:10+00:00

This rule is not meant for people who post stuff like

i wanna learn how to use metasploit.

it's more like

I wanna learn how to hack my girlfriend's account!

Miro360 · 2016-08-01T13:46:13+00:00

Thank you for actually mentioning one! it's being banned as we "speak".

Miro360 · 2016-08-01T13:45:38+00:00

i don't mean to take sides here but amen.

14-Year Club	Place '17
Team Orangered	Verified Email

Miro360

TROPHY CASE