Have you ever hacked anything?

Tell your story.

My first hack was a typing speed test, 10 years ago. I didn't know about any tools back then so I just downloaded the website and modified it so that whatever you were supposed to type was already typed. It had a captcha that was retrieved after you've finished typing, but there were only like five possible answers, so you could just guess it.

I've also bypassed some poorly-made restrictions to some private streams to watch soccer matches. I've also made some forum-spamming bots, but it was just for challenge. I've never actually used it on an active forum.

How about you?

Other urls found in this thread:

youtube.com/watch?v=hL0DQdbs7yQ
twitter.com/NSFWRedditGif

...

I once entered "admin" twice on some router and it accepted

[email protected]/* */ the High School Sports Master's computer and deleted my name from his copy of the enrollment list on his office computer. Next semester they were handing out the sports acceptances in homeroom, and my name wasn't mentioned.

Teenager hacks his high school computer system for better grades? I already had good grades-- I made it so I could skip the rest of the year's half-day Sports and go straight home to play vidya. (And never got busted.)

I h4x0r'd a WEP protected AP at school once, so I could play MTA: San Andreas in class.

I hacked one 'MOBA' game to gain multiple free heroes instead of one.

Encryption and Security 301 in college. The professor literally left us an assignment that said "1: Start Backtrack 3 on one of the lab's computers, and Windows on another one. 2: Send the computer an ARP poisoning MITM attack. 3: Connect to this public FTP server of mine while running Wireshark on the computer that booted Backtrack. 4: Analyze the FTP traffic and look for my username and password."

Even though this is probably a spook thread, I've received bug bounty payments from a few companies, found random exploits in different software, have broken I2P & Freenet, & more recently I found RCE exploits in a few torrent clients, those are pending fixes.

There used to be a very noticeable exploit on a website for an online game I used to play. A friend of mine (R.I.P buddy) by accident found out one of the scripts on the main site was bugged.

You'd have to be blind not to notice it since just clicking the correct combination would give you admin, and the admin panel would let you outright execute php. A few of us used to do it and just take over the whole site, which the admin would take it down and put it back up hours later.

One time we did it while the mods were asleep and we changed all the users names, put a video of one of our friends showing his balls on screen, and we leaked the next version of the game. Even got the source code which we kept and never gave out.

The best part was, one time when they restored everything, they forgot to remove the database they uploaded in the public /downloads/ folder. One day, Google crawled it and we got the entire DB! We started leaking people's crap bit by bit (Including some furfags furshit stuff). Some people were even retarded enough to PM passwords to shit, including the master ban list which we unbanned everyone and banned new people like the furry previously mentioned.

Then we uploaded the DB a million times so everyone could see all the private stuff going on behind the scenes. Needless to say, the admins had some colorful opinions of people behind their back, one was even stealing money by asking people to send her (yes, her) money to a "friend's" paypal. The staff were harassed for months until the game died, and they gave the source to some /r9k/ autistic.

One guy was so paranoid about the whole thing that he hides behind some serious opsec now. All because a shitty image loader had a major security bug that no one noticed for 3 years.

I didn't actually do anything (other than spam, troll, and tell people about /downloads/), but I was there for the ride.

I found an SQL injection on a message board's online users page, used it to binary-search the password hash for one of the admin accounts, spoofed a cookie to get in, and from there grabbed the entire server's data and replaced everything with a single copy of hello.jpg.

The owner had a complete mental breakdown and later became a furfag

Good times.

Decompiled a few flash games, changed a few numbers, and re-uploaded them for the gratification of twelve year olds the world across. Got into several Facebook accounts and took a look around. Nothing much beyond that.

I once defaced a Japanese porn website to tell the guy "hey faggot upload more saimin JAV onegai"

Back in the old days, I was a YTMNDtard This was in early 2005. There was some sort of YTMND justice league or some shit I was involved in, was pretty gay, would go around pushing certain memes.

One day, I woke up and realized it was cancer and needed to cut it out of my life. Got involved with the Holla Forumstard group that was opposed to YTMND on 4chan. After a while, I discovered an XSS exploit in the avatar image field on the forum system the YTMND group was using. Used it to get the cookies from the admin and we pretty much fucked their forums up so bad they were forced to disband.

It was my first and last time doing black hat shit. Now I just work as a programmer.

When I was in middleschool I 'hacked' the admin account and deleted every report card, test results, test papers, etc

I-I just wanted to see if files couldn't be deleted like the school technician claimed ;-;

I hacked a website around 2001. Bruteforce with a dictionary attack a password to ftp.

Occasional CTF player, I really like binary exploitation. I haven't done much outside of that.

...

I knew a guy who would make all sorts of things like wallhacks and shit. The best part was he found away that if you tried to debug his hack in Visual Studio it would destroy the boot record on your hard drive. Not sure if he ever released that one.

nope
clintonmail is my bitch

...

I've disassembled chargers and changed the connectors to fit the region standard.

Back when I was an underage script kid, I made a phishing tool that pretended to give you operator rights on any minecraft server, and made a believable video around it. Spent fucking hours removing all personal information from that vid, but it netted me about 400 minecraft accounts in a week I could use for griefing.
I also installed a RAT on a classmate's computer through the use of a custom bukkit plugin when he asked help for setting up a minecraft server that would've competed with mine.
I also once "hax0red" a WEP password from a nearby hotspot, because my parents would turn off the wifi when they were angry at me.
Thinking back on it, I was a pretentious little dipshit. I'm glad most of the forums (except the Arch forums) where I spread my cringe are gone.

As for "real" hacking nowadays, I just hack on some games I play sometimes for fun, and back when I loved looking at game's network protocols I've written simple shitty bots or chat clients.
Nowadays I don't really do much of what would be called "hacking", in the sense of breaking into something. I do a lot of system maintenance/configuration stuff considering I run vanilla slackware with patches for some packages I make myself, same goes for LineageOS on my phone. I've also gone much lower level and screwed around with x86 and arm assembly, attempted to make an OS but didn't get far, dicked around the 3DS, tried a fancy CTF, and am now attempting to make a gameboy emulator, but probably won't get much further than boilerplate because I'm not used to writing userland C.

Early 2000s in high school, in physics class we had these newfangled laptops with PCMCIA WiFi cards that we used in class to type up reports for our labs. Had Novell for applications over the network, but there was a networked drive that students weren't allowed to access through standard means in the Windows GUI. One of the applications from the network was QBasic, which I had been tinkering with on my own for the past year or so. I remember fucking around in QBasic a bit some time before this on the computers in the school library... until a librarian came up to me and asked me what I was doing and said to cut that shit out, kek.

Anyway, in physics class and without any school staff there snooping over my shoulder, I got the brilliant idea to use QBasic and access an MS-DOS prompt. It fucking worked, and accessing the teachers' network drive also fucking worked. Didn't want to raise any suspicions by being a fucktard and changing anything there, but I did happen upon a "confidential student info" file that I snatched onto floppy disk, with every students' name, address, phone number, and SSN.

In my dude backtrack lmao phase many years ago i learned the absolute basics about SQL injection, never even worked with SQL at that point, and looked for websites that are vulnerable. Either every fucking small-timer website on the planet was vulnerable back then or i got very lucky at the 5th or so attempt.

It was a custom beer buying website, you could just type what you wanted into the URL, the tables were all very obviously named and i felt so fucking cool. I got a list of their customers with banking information and so on, they even had tracked handwritten comments on some customers like delivery details and if something went weird in the communication. Never did anything with the data but it was a rush to get that shit actually working so quickly.

Setting:
- backwards eastern-yuro country
- late 90's
- software copyright still a very new concept in law, nobody gives a shit about it .
- no internet in this shithole, therefore no warez sites
- no "legitimate" software distribution channels either (except Kikerosoft and a few local software houses)
- only ways to find/get software: share floppies with friends, pay a shifty Russian warez peddler in the local flea market, buy computer magazines that come with CDs filled with random demo crap.

It's called Ascendancy, very cool shit, runs well in DosBox. You should pirate and try it right now.
>change both to one, load game

thats awesome

holy shit, look at that figure
Stallman is quite literally the epitome of skinnyfat

So, do you regret being a fat fuck?

you fool! That means you missed the massive 'turn 1500' event! You never played the full game anyway!

I played Ultima 5 with an application that would take memory snapshots and compare differences--basically what you did manually. it stopped working when we moved to Windows 3.1

Pasta thread?


In all seriousness, I "hacked" some windows XP lockdown program at my highschool. Pretty lazy effort, just open wordpad with a massive file (a copy of firefox portable did the trick), and while it's chugging, hit the power key, wait for the locker to die, then cancel shutdown. It also got rid of the annoying screen monitoring software. Firefox portable was also how you could get around the web filter proxy.
I also shared some of >>720353's fun, living in rural canuckistan there's no easy way to get games so we had a ring where I would use my Pentium III's cd burner to mint copies of games. Sadly they wised up and would check the CD key for multiplayer games and refuse to connect to someone with the same key. Someone else broke one by going through the installer code to find the strings for key verification and guestimating how to increment them, but then we graduated and moved on to bigger things. Save file tweaking was fun too, we used to really police screen-peeking at lan parties AoE all day erry day, but during a dull moment, since I ran the server, I could pop open the save files and see what they were up to

Back in the ancient days of the web, I discovered that I could post HTML in some naively coded chatboxes. This would allow me do embed things like very loud enthusiastic sex videos and fuck with other things as well. No one would know were it was coming from if you used additional chat posts to move the video from view.

One site I especially remember was some shitty webcomic that was some kind of "western" themed bullshit with a literal shota catboy villain. The author also loved using rape as a drama device. Naturally they had a chatbox to they could shower themselves with the praises of adoring fans sycophants. Well there was certainly a lot of drama when I repeated raped their webpage. Took them two days to figure out what was wrong.

Back when Windows Xp first came out I would IP range scan the open internet for network shares then log in to their PCs over the internet with the Administrator account which you normally only see when booting in Safe mode and used the default empty password (how many people change the password on the account they don't even realize is on their computer and even if they did probably never thought it could be used to log in over the internet) then fuck around with their hard disks. IIRC I had root access so I could pretty much do whatever. I think nowadays firewalls and routers tend to put a stop to that, but honestly I haven't tried. I'm pretty sure the built-in network shares and hidden user accounts with null passwords that can log into your computer over the internet still exist. It was funny, but I'd hardly call it hacking when Microsoft just releases an OS with an open backdoor to the internet.

But yeah, I hacked a bunch of people simply because they had the misfortune of being online and running windows xp. The dial-in modem connections may be gone but the lazy-as-fuck war-dialing methods persist. Didn't do it for long though. It got boring though after the first dozen or so computers. Also, speaking of dialing, that reminds me of the time you could make free phone calls from payphones by tape recording the right tones to fool the phone system into thinking you inserted coins.

There was also a time when I thought it would be funny to make my own trojan horse viruses, so there's that.


Man I forgot about that shit. Yeah there was a lot of terrible "security" like that back then.

Microsoft!


Yeah hex editing savegames was and continues to be a staple.


Back then you had guestbooks too which had zero sanitization.

Heck, in the early days of the web, domain security policy didn't even exist. I used to make my own custom html frameset pages which would load websites on other domains and run javascript on their content because security was not a thing. I just used it as a proto-greasemonkey, but I probably could've robbed some bank accounts if I wanted.

I take apart and fix my own shit all the time. Controllers, keyboards, mouses, computers, toilets, handhelds. One time I got past the security screws to re-align my Gamecube's laser by melting some pens and melting them into the right shape. I love hacking.

Yeah if you were making trialware you were begging to get cracked. It's just reflex to start poking around to make the thing run longer once the trial runs out. A better hacker would've edited the binary to remove the turn 500 limit, but that's generally too much effort unless you were in the cracks scene.

still not sure if can call myself hacker

Careful, this DANGEROUS HACKING is how Aaron Swartz got governmentally suicided.

They lost anyway. Now we have Sci-Hub.

Old school IE was a fucking windows shell that just happened to also do http.

Pasted some ZALGO into the work chat.
Stole an email account by guessing "recovery question" answer from 1st try. (the account owner was just a stupid girl)
Bruteforced admin password on university computers with Windows XP, by stealing hashes while booted in backtrack and then cracking them offline.
Gained r00t on several android devices and/or re-flashed them.
Installed CHDK on two compact cameras.
Set meatspin.com as home page on a computer in university library and set audio volume to max & heard this shit activated in 10 minutes.
Figured out myself how to reset trial for several applications.
Also wrote several web crawlers but that's boring shit

Am I a cool haxxor? :D

Scihub is meant for research papers. What got Swartz bumped off was accessing public domain documents on a public website by iterating numeric IDs like this.

We had a game on the computers that had you match a science term to a definition as fast as possible. If you got in the top 3 you would get a shit ton of extra credit. The server didn't have any protection, I just sent it an 8 line JSON file and I was #1, #2, and #3.

Very funny, and for those who fell for your joke:

He connected his laptop in an MIT serverroom and used his MIT account to Elseviers catalog of research papers to fetch them all..

The surveilance cam setup by MIT got him busted..

youtube.com/watch?v=hL0DQdbs7yQ

While it was possible to use IE as a shell, back then it wasn't integrated into the windows shell as the newer versions are. Microsoft claimed IE was integrated into the OS over legal monopolistic concerns of forced bundling killing Netscape, but it was actually possible to remove the thing, which was a strong point in Netscape's favor. In newer version of Windows, IE is fully integrated into the OS shell so it's impossible to remove.


That black trenchcoat is really inconspicuous.

In reality, at MIT? Probably.

Hacked my nieghbor pc with windows xp full screen with porn

Sheeeeeit. I thought Winblows did the opposite after the lawsuit. I gotta admit that was a long ass time ago, and I never liked IE. Shit, back in the late 90's I tried to install linux, and could never get it to work. Assuming I could get the first floppy to even work, I would always get some kind of kernel panic or bullshit on startup.

This brings things back on topic. This was back in the day when I would telnet to SMTP servers and spoof emails by hand. I got on shell accounts and mostly just played around. Sometimes I would write programs in C, but they never did anything useful. Sometimes I would look for websites that left their cgi-bin too permissive and browse around. Again, I was a kid and had kind of a shitty grasp on things so I never really did much with it.

One time I was telnetting around and found a login for some random company. I tried guessing some username/password combos. One of them was something like user:companyadmin pass:admin, and the damn thing actually logged me in to some kind of shell. I noped the fuck out of there and waited for the feds to show up. They never did. Looking back, I think it must have been a honeypot. Then again, maybe their security really was that shit.

You can remove on 2000 and XP as well with LitePC. Unless you mean NT6, in which in that case, I do not know.

defaced websites
tried to breach my school's website
removed the deepfreeze of my school lab's pc and riced it
wiped a deepfreezed pc with my very own script
hacked isp plenty of times, even got my ip blocked due to malicious activity (facebook, google, yahoo, twitter won't work and shows that bad IP warning)

forgot to include: i got the database but passwords were fucking salted. It's long time ago but I doubt it's patched considering the fact most school websites are hackable

Hacked your mom was a easy 2 cheeseburgers get access algorithm.

I had an online class in highschool once. It was for classes that the district couldn't get teachers for, so the year prior we had to sign up for one of the several courses they offered. I wanted to take an AP comp sci course, but ironically the comp sci university students who made the system weren't able to finish it in time, so I had to choose another one.

It was a pretty sweet gig, the school got laptops just for the program we were in, and because there were so many different courses that students could choose from, we just got one teacher to essentially babysit us while we worked on our own. The only thing the teacher would do was print and grade our exams, otherwise we got to fuck around.

About 2 or 3 weeks into the school year, my course gave me a practice problem where I had to read some info from a text file, and use it to solve whatever. I looked at the address bar and noticed that the browser was directly pointing to a .txt file on the class's website. Hearkening back to my hackthissite days, I deleted the file name from the address to see if it would take me to a file explorer, and lo and behold it did.

Working my way up the folder tree, I eventually found the grading rubrics for every single exam for the entire year, which were the only graded portion of the entire class. Needless to say, my fellow classmates and I had a good year

Uh...

Due to bullshit web design I often have to right click and Inspect Element to remove pop-ups like on adfly that wants me to turn off my ad-blocker so my download will continue.

D-Does that count as hacking? No? Then no, I haven't.

Ima good boy I didndunuttin

no. but i done been hacked.

You guys probably won't believe this but I hacked Apple's software R&D facility through social engineering and good luck. I was able to pass myself off as an engineer, contact actual engineers, and then use their own information to gain access to some of the software on a couple of servers in building two. No source code but I pulled a bunch of files documenting the low level software on a bunch of their mobile devices. I know where the boot-ROM puts the heap and stack in memory on boot in A5-A8 devices and how signature checking is performed and how the containers for the recovery and DFU files are decrypted and opened. I also have a better understanding of how they do hardware backed decryption for those files. I also have documentation on baseband nonce generation in 32-bit devices. I plan on using this info to pwn the boot-ROM and defeat Apple's shitty signing system. Not sure yet if I will release this stuff to the public or if I'll find some company who will buy it. I'm having a lot of fun.

You guys probably won't believe this but I hacked Apple's software R&D facility through social engineering and good luck. I was able to pass myself off as an engineer, contact actual engineers, and then use their own information to gain access to some of the software on a couple of servers in building two. No source code but I pulled a bunch of files documenting the low level software on a bunch of their mobile devices. I know where the boot-ROM puts the heap and stack in memory on boot in A5-A8 devices and how signature checking is performed and how the containers for the recovery and DFU files are decrypted and opened. I also have a better understanding of how they do hardware backed decryption for those files. I also have documentation on baseband nonce generation in 32-bit devices. I plan on using this info to pwn the boot-ROM and defeat Apple's shitty signing system. Not sure yet if I will release this stuff to the public or if I'll find some company who will buy it. I'm having a lot of fun.

Why does posting through a VPN always create repeats?

was doing tech support for me nan few years back and literally did this and it worked thankfully

label had worn off somehow and i wasnt even sure the model name so i would have been fucked otherwise

this is such a retarded term
just say you lied your way in faggot

My best hack was when i hacked Holla Forums.

wow prove it newb

ACTUALLY he engineered all of society to get the password

I dont have to prove anything to you

That's aboot it.

Did alot of crackmes and reverse engineered shitton of these so called game cracks also made trainers for games myself.
Good shit, was more fun than you see now with metasploit and shitty python scripts.

...

...

I hope this thread will be fun

...

...

There was this shitty program my school used called "SOS schoolhouse".
You would do your lesson and after the fact it would send your grade to a server.
I figured out that the serever didn't have anyway to prove that the grades were legit and all the answers were stored locally.
I disconnected my computer and perposfully did all the answers incorrectly and then I clicked the "show answer" button to get the answer.
Afterwords i would exit out of the application and reluach it with the connection turned on.
I ended up getting straight A 100% on all lessons and no one ever found out about it.

budget is down, how do find hacker

You can't just divulge all that juicy shit without telling people what game it was and without posting the source code.

I'll believe this if you can provide the source code to said game.

It wasn't that impressive, but I couldn't stop laughing after seeing their reactions.

i hacked my prostate with a horse dildo once

lucky

Can anyone tell me where to have a discussion about pen testing (wifi hacking etc) here (if it is even allowed)?. I cant find anything.

Any other place to talk anonymously is welcome too.

Help.

Swartz bumped himself off.

...

I went in through a backdoor once and hacked a mainframe via a serial port using sudo on Linux Ubuntu in a Virtual Terminal using `cd` `ls` by holding during boot and keeping a piece of masking tape over my webcam (OPSEC). I'm a blackhat, but this was one of my first hacks and I never sold the information on the dark market on the blackweb.

Mr Robot was based in part around my expl0its. I can hack a prison in under 10 seconds by dropping a thumb-drive outside a police station.

Like this:
>>>/baph/

I messed with this election once, hated one of the cunts that was running so I wanted to see her crash and burn. I wasn't alone, I had a few hundred fellow basement dwellers, we were pretty drunk too.

Do you recommend college

Normie lurking here.

How did you autists learn this shit? I don't understand half of what's being said. Did someone teach you? Did you read a particular book?

Being an autist allows you to be a sponge and the world water.

My first hack worthy of writing about was a program that let me see all in/out traffic and DNS spoof on whatever network I was connected to. Pretty neat, never abused it though because I'm a good boy.

...

>>>/baph/

Sorry, it won't let me delete my posts for some reason.

How have you learned anything else? It doesn't happen over night.

You don't understand it because you are basically currently reading another language, it just so happens that you can sound out all of the words. Eventually, you learn the meaning of a few of them and bit by bit the bigger picture emerges, clearer and clearer. Initially it seems overwhelming, so focus on one thing area at a time. Just learn a programming language, and the rest will start to fall into place as needed. One thing is for sure, you will learn the most by doing.

My toaster.

Yeah I definitely believe that. I mean who would go on the internet and lie?

Keep in mind "Hacking" refers to any edits made to a machine to improve it or change it's purpose".

I have hacked household appliances such as putting capacitors into a toaster to strengthen its ability to heat bread.

Back in the 90's, instant message networks went through an arms race of sorts, with "punters" and "anti-punters" developed for all the popular clients. This was pretty fun.

My parents set a CMOS startup password on our 100MHz Pentium I Compaw Presario (a $3,500 with Windows 3.1, upgraded to Windows 95). I learned from the manual how to swap a motherboard jumper pin to bypass the password. On this same computer, I found porn my dad was looking at and I ratted him out to my mom.

The 90's was a time before firewalls were ubiquitous, and all the schools in my city were connected to the same network. I would often print out bomb threats on the laser printers in the teacher's lounges of other schools.

On my last day of high school, i installed sub7 trojans on every computer in the computer lab, and had them broadcasting all of their information to a private IRC server. I was able to remotely control the entire lab for several years. Never did anything nefarious, mostly just stealth-edited people's projects, like adding a single nonsense sentence in an essay: "They say reptile humanoids stalk the mountains in this region." etc. Only targeted chads and stacys.

Once broke into a classroom with the intent of changing some grades, but decided to just steal the teacher's PC once we actually got it. This led to a close call where I got "scared straight" and never stole or cracked systems again.

My script kiddying experiences left me with a desire to learn more, and motivated me to eventually complete a BS in Computer Science. I'm currently a mediocre software engineer with a high stackoverflow score and a normalfag GitHub page.

nice job faggotini

I won't go into details, but I was raised in a snitch culture by both parents. I naively thought I was being virtuous. My dad confronted me and said, "Are you trying to embarrass me?" I was shocked because it was the first time he ever spoke to me like I was a peer.

It's cracking, not hacking.

I hacked the Gibson once.

Yes Mr. FBI, I hacked the servers of various big companies, including but not limited to General Motors, ExxonMobil and The Walt Disney Corporation.
I also have several dead hookers in my basement, as well about 700 pounds of enriched uranium, which I intend to sell to domestic terrorists, so I can afford more CP on the darknet

t. Nuclear @ #Holla Forums

I used someone's public phone number as his password on facebook and it worked. I got his number from his facebook too.

RULECUCK

...