Topic: Hack This - Open Invitation - page 2. (Read 561 times)

Isn't your goal to prove your code is secure?  What is wrong with professional testers?

Prove you have the 50 BTC or no one will take you seriously.

Pardon me but I do not understand? I ran a test run 2 years ago and participants tested it and were able to withdraw their coins.  Who is a scammer on the previous thread and how do you know that?



This is a new endeavour. If the website had 50 BTC, nobody would invite it to be hacked, would rather get it professionally tested from experts.
Asking for proof of 2.5 millions USD is a fool's errand - think about it. I can provide a screenshot or a BTC address but that does not mean the coins are on the website. I can only prove that the coins exist and that I have the private key, how would that make you believe that you will get access to it after hacking the website?


Haha I appreciate good humour. Indeed - MS Frontpage 2.0 for the win. But this was written using nano.

This is not a cool and good looking website with the latest UX/UI tech implemented by any means.
The website is intentionally basic and without javascript. It will be accessible via an anonymous network layer - an overlay network.. which are usually slower than websites on surface web, so the UI is needs to be light and simple.
The redirection service I am using does not issue SSL certs based for subdomains. Where it will be finally hosted might not need a certificate since it would already be on an encrypted network overlay.



To everyone who has responded:
It is very easy to tear things down and mock people's work, if you don't consider testing this worth the effort, then thank you for stopping by. I have invested lots of years in this project.
I appreciate your time. You may move on.


To anyone about to reply:

Criticism is welcome, but please don't make that your only goal.
Thank you. Happy cracking.

Yes, I also have a no-certificate alert.
If you decide to ignore the warning, there are pages behind it that look like they were designed in the '95.
index page, which contains a frame with an index1 page... It seems that some kids found a very old tutorial, on how to make the first website.

First, you need to prove that there are some coins behind everything. Why would someone spend time proving anything to you, when you have, for example, only 0.001BTC in your wallet?
Proof that at least 50 Bitcoins are there will stimulate anyone to try the hack.

Also, who even considers this serious and worth any effort?

You have support from one of the biggest scammers on the forum.
https://bitcointalksearch.org/topic/i-need-test-audience-for-a-project-5378976

Even visiting your insecure page will probably lead to BTC loss. 

I have now provided the hash and the self signed certificate in the original post for your reference.

Page is not secure. 

Inviting hackerz, crackerz, data hijackerz!!

Come hack our crypto exchange. Yes you read it correctly. After a preliminary testnet test - UI and operational test (in 2022), you all are invited to do a full blown penetration test. This is no longer a testnet exchange - it is on mainnet!! Both BTC and ETH mainnet. It holds a few coins. Finders, keepers! Since there is no official payment for this - the crackers and hackers can hack it and take what they can. If you hack this exchange, the coins it holds is your reward!! If you cannot do that, no problems, report me all major findings - but, no, please do not tell me there is an iframe in use, no CSP or SameSite cookies or that it does not obey OWASP Web Top 10, if you think that is a concern then please exploit it and give a PoC shell or something similar that is critical. This is not a vulnerability assessment request, so webscanner results won't cut it - There are no made up CTF baby flags - the flag is real - real mainnet coins! Interested people are invited to test this and report back if interested - PM me. End of the test will be announced here in this thread.

Thank you.

2022 forum post - https://bitcointalksearch.org/topic/i-need-test-audience-for-a-project-5378976

Link to the exchange - Hack this -  https://blot3d-36601.portmap.host:36601/

---

---

SHA256 of the certificate:

---

Full blot3d-36601-portmap-host.crt certificate: