+- Sinisterly (https://sinister.li)
+-- Forum: Hacking (https://sinister.li/Forum-Hacking)
+--- Forum: Website & Server Hacking (https://sinister.li/Forum-Website-Server-Hacking)
+--- Thread: SQLi White-Hat vs Black-Hat (/Thread-SQLi-White-Hat-vs-Black-Hat)
SQLi White-Hat vs Black-Hat - Bannedshee - 12-24-2012
I found 4 vulnerabilities on 4 different sites, sent the owners emails and waiting for their reply
Anyone else here do white-hat SQLi?
Why or why not?
Personally, I do white hat because its so much better, not only do I have a chance of getting paid, but I won't get arrested, so in my honest opinion, white hat SQLi is much better
RE: SQLi White-Hat vs Black-Hat - blazer15 - 12-24-2012
I usally perform whitehat activites, But i mostly perform blackhat.
SQLi White-Hat vs Black-Hat - Adorapuff - 12-24-2012
(12-24-2012, 08:57 PM)blazer15 Wrote: I usally perform whitehat activites, But i mostly perform blackhat.
That makes no sense what so ever.
RE: SQLi White-Hat vs Black-Hat - 3SidedSquare - 12-24-2012
Strictly speaking, the owners of a site can still take you to court if they want, even if you didn't deface the page.
Or... use it for more illicit activities.
RE: SQLi White-Hat vs Black-Hat - Oni - 12-25-2012
(12-24-2012, 11:56 PM)3SidedSquare Wrote: Strictly speaking, the owners of a site can still take you to court if they want, even if you didn't deface the page.
Or... use it for more illicit activities.
That's very rare, as I can't see them taking you to court if you're helping them out.
RE: SQLi White-Hat vs Black-Hat - KyleFYI - 12-25-2012
To be honest, I've reported a lot of exploits to sites and the next day no reply I try the exploit and BAM its patched. I don't even try anymore.
RE: SQLi White-Hat vs Black-Hat - Ultimatum - 12-25-2012
The point of being White-Hat isn't because you look for money or something in return... That's really not the White-Hat idea. But, don't expect to get much out of it, unless it was a vuln on Google, Yahoo, or of the sort.
RE: SQLi White-Hat vs Black-Hat - Charon - 12-26-2012
(12-25-2012, 05:33 AM)KyleFYI Wrote: To be honest, I've reported a lot of exploits to sites and the next day no reply I try the exploit and BAM its patched. I don't even try anymore.
That sucks, if that was me I'd wait untill it's vulnerable again and then fuck up all their shit and leave a friendly message.
OT: You shouldn't message the website owner because the same can happen to you what happened to Kyle and then you're fucked. Well not fucked but they will probaly patch the vulnerability without letting you know.
RE: SQLi White-Hat vs Black-Hat - Bannedshee - 12-26-2012
(12-26-2012, 05:11 PM)INST1NCT Wrote:Eh, honestly I don't really care that much for the money, its just like an extra thing I can get. I only report the exploits to help both the website and myself.(12-25-2012, 05:33 AM)KyleFYI Wrote: To be honest, I've reported a lot of exploits to sites and the next day no reply I try the exploit and BAM its patched. I don't even try anymore.
That sucks, if that was me I'd wait untill it's vulnerable again and then fuck up all their shit and leave a friendly message.
OT: You shouldn't message the website owner because the same can happen to you what happened to Kyle and then you're fucked. Well not fucked but they will probaly patch the vulnerability without letting you know.
RE: SQLi White-Hat vs Black-Hat - Kinanizer - 12-26-2012
Personally, I like to warn the site owners about the problem. If in a week they don't fix the problem I will exploit it and do as much damage as possible.