lainchan / sec

Shit that shouldn't be so easy in 2020 General

I guess this is: · 2020-11-07 03:21
>find basic trolling forum, want to see if I can fuarrrk with it to learn about automation and pentest skills >sign up requires reCAPTCHA but no email, login doesn't seem to have captcha >if login can be automated, then switching accounts should be easy to automate >want to see if sneaky captcha loads only after start filling in form (it does on some sites) >user 'testtest' >nothing appears >pw 'testtest' >nothing appears >enter >it's a valid account I wonder how many I can pop just doing predictable combinations like 'password':'password'. Will report back if interesting.
Dr. X · 2020-11-07 03:42
>>12957 What site is this?
Nell · 2020-11-07 03:47
it's shockingly easy to get in most systems and accounts with simple passwords, if your lucky try a pass list with season:year things like Winter2018 is a pretty common password on accounts.
Agent Jones · 2020-11-07 03:54
>>12958 Not saying just yet, but I had similar results on thedonald.win (similar situation where they clearly took software and modified it without understanding how to safely do so) >>12959 My old workplace had a similar wifi password convention but didn't updated it as the time went along, so it would still be like Spring2017.
HELIOS · 2020-11-07 04:14
>>12958 He didn't say... Maybe it was Voat, they have an API and are infested already.
Agent Richard Gill · 2020-11-07 04:30
>>12962 Oh god, it's like Reddit fuarrrked a goat. I hope he's giving it a good bashing