SCAMMER TradeFortress P-T'ed my site without permission, no damage afaik. CLOSED - page 2.

MoneypakTrader.com

sr. member

Activity: 472

Merit: 250

Never spend your money before you have it.

Quote from: raze on June 03, 2013, 08:46:59 PM

Quote from: MPOE-PR on June 03, 2013, 08:19:29 PM

Quote from: MoneypakTrader.com on June 03, 2013, 05:58:05 PM

I like my site the way it is: impenetrable

Lol good one.

My thoughts exactly.

FYI, if it's on the internet, it's not safe. No exceptions.

Quote

looks like you're not the only hacker with a colorful sig trolling for work using your minimal coding skills

Minimal coding skills? Granted, they're not top-of-the-line, but you're the one here with a vulnerable website..

Is that $1k bounty open to the public?

I'm not convinced you're a separate identity from tradefortress, prove that to me via torchat first.
If it includes the fix, I could probably do $50-$100 which is well above the standard for hourly contract work.

raze

full member

Activity: 182

Merit: 100

Quote from: MPOE-PR on June 03, 2013, 08:19:29 PM

Quote from: MoneypakTrader.com on June 03, 2013, 05:58:05 PM

I like my site the way it is: impenetrable

Lol good one.

My thoughts exactly.

FYI, if it's on the internet, it's not safe. No exceptions.

Quote

looks like you're not the only hacker with a colorful sig trolling for work using your minimal coding skills

Minimal coding skills? Granted, they're not top-of-the-line, but you're the one here with a vulnerable website..

Is that $1k bounty open to the public?

MPOE-PR

hero member

Activity: 756

Merit: 522

Quote from: MoneypakTrader.com on June 03, 2013, 05:58:05 PM

I like my site the way it is: impenetrable

Lol good one.

MoneypakTrader.com

sr. member

Activity: 472

Merit: 250

Never spend your money before you have it.

Quote from: 🏰 TradeFortress 🏰 on June 02, 2013, 05:24:03 PM

Thanks for advertising my pentesting skills too! Wink

looks like you're not the only hacker with a colorful sig trolling for work using your minimal coding skills

MoneypakTrader.com

sr. member

Activity: 472

Merit: 250

Never spend your money before you have it.

Quote from: raze on June 03, 2013, 05:47:35 PM

Hai im anon and will you pay me to hak ur siet?

how do you do your forum sig like that?
I like my site the way it is: impenetrable.
I won't be paying for hacking services because the site is unhackable.
If the great TF can't hack it for $1000 in BTC then no one can.

raze

full member

Activity: 182

Merit: 100

Hai im anon and will you pay me to hak ur siet?

MoneypakTrader.com

sr. member

Activity: 472

Merit: 250

Never spend your money before you have it.

Quote from: Vod on June 03, 2013, 02:50:50 PM

Quote from: MoneypakTrader.com on June 03, 2013, 02:29:42 PM

This problem is solved, please discontinue use/lock the thread.

You can lock your own threads.

I know not of this magic

Vod

legendary

Activity: 3668

Merit: 3010

Licking my boob since 1970

Quote from: MoneypakTrader.com on June 03, 2013, 02:29:42 PM

This problem is solved, please discontinue use/lock the thread.

You can lock your own threads.

MoneypakTrader.com

sr. member

Activity: 472

Merit: 250

Never spend your money before you have it.

This problem is solved, please discontinue use/lock the thread.

MoneypakTrader.com

sr. member

Activity: 472

Merit: 250

Never spend your money before you have it.

Quote from: 🏰 TradeFortress 🏰 on June 02, 2013, 06:51:08 PM

Anyways, you still have vulnerabilities in your code. This is why you don't do financial sites when you have no basic web security knowledge.

If I am a 'scammer', why did I report a serious vulnerability on this forum you are reading right now instead of compromising the account of anyone I want? Because I don't do that.

I appreciate you reporting the severe code vulnerability the coder who did my site introduced, I'll credit you with 3 BTC for the discovery.
Interest for 6 months on the 27 btc you deprived me of is 2.7 BTC (20% interested for involuntary debtor relationship).
You're down to 26.7 BTC that you owe me.
Please continue to penetration test my site to work off your debt.
I've decided to increase it from $360 to $1000 in BTC reward for the next critical vulnerability such as your admin account hack you did. That's a personal rate for you since I like you so much and need to get the solutions to a better site (price must include a full fix of the vulnerabilities discovered).

UPDATE offer refused by TF and retracted by me.

MoneypakTrader.com

sr. member

Activity: 472

Merit: 250

Never spend your money before you have it.

Quote from: MagicBit15 on June 02, 2013, 05:44:29 PM

Oh TradeFORtress was the one that coded your site? I didn't read that part, I thought it was someone with a copycat name.
Your an idiot, Tradefortress is a legend, your rant is random, probably fake scam report, and invalid. If your site got hacked by someone else, still your fault, it's your website.
/Thread

Counter-Troll:
He started to code it but failed/refused to finish, kept the 27 BTC I paid him and is now penetration testing me apparently to "advertise"
You're the idiot cause he admitted to all of this (except claims without evidence to have finished my site, particularly strange because another coder claims the same thing in these forums unless he took it down after getting his code p4wned).

MoneypakTrader.com

sr. member

Activity: 472

Merit: 250

Never spend your money before you have it.

Quote from: danieldaniel on June 02, 2013, 05:29:35 PM

All you have to do is htmlentities();

Do that with any user-supplied input before you print it to the screen.

Edit: You can see the PHP page here: http://php.net/manual/en/function.htmlentities.php

Edit Edit:
Fully functioning code:
-Start-
while ($xyz = $mnop->fetch()) {
htmlentities($xyz);
echo '
Message: '.$xyz['stuff'].'
';
}
-End-

Thanks for trying to help, but your edit failed to work.
I'll investigate the function and find some solution.
Actually, I think I found the correct way to do it and your contribution helped a little.
Where do you want $20 BTC?

mprep

global moderator

Activity: 3794

Merit: 2612

In a world of peaches, don't ask for apple sauce

Man, this discussion heated up qucikly. Looks like MoneypakTrader does have some anger issues. Cheesy

MPOE-PR

hero member

Activity: 756

Merit: 522

Quote from: MoneypakTrader.com on June 02, 2013, 01:01:54 PM

Who do I give root access to my site to back the accusations?

My vote is on Pietila.

🏰 TradeFortress 🏰

vip

Activity: 1316

Merit: 1043

👻

He is using some of mycode. Two different developers have found it impossible to work with him. What does that tell you about him, or is it always the developers fault?

Anyways, you still have vulnerabilities in your code. This is why you don't do financial sites when you have no basic web security knowledge.

If I am a 'scammer', why did I report a serious vulnerability on this forum you are reading right now instead of compromising the account of anyone I want? Because I don't do that.

MagicBit15

sr. member

Activity: 294

Merit: 250

Let's Start a Cryptolution!!

Oh TradeFORtress was the one that coded your site? I didn't read that part, I thought it was someone with a copycat name.

Your an idiot, Tradefortress is a legend, your rant is random, probably fake scam report, and invalid. If your site got hacked by someone else, still your fault, it's your website.

/Thread

Pichu

newbie

Activity: 40

Merit: 0

lol'd. I wouldn't do service with someone who doesn't secure his website properly before he takes on lots of clients. GJ TradeFortress.

danieldaniel

hero member

Activity: 854

Merit: 1000

All you have to do is htmlentities();

Do that with any user-supplied input before you print it to the screen.

Edit: You can see the PHP page here: http://php.net/manual/en/function.htmlentities.php

Edit Edit:
Fully functioning code:
-Start-
while ($xyz = $mnop->fetch()) {
htmlentities($xyz);
echo '
Message: '.$xyz['stuff'].'
';
}
-End-

🏰 TradeFortress 🏰

vip

Activity: 1316

Merit: 1043

👻

Thanks for advertising my pentesting skills too! Wink

🏰 TradeFortress 🏰

vip

Activity: 1316

Merit: 1043

👻

LOL? Prove that I have "changed my deposit address", that was the auto generated one. You can't even change it, bitcoind or Blockchain.info doesn't let you. It looks like a vanity address through Cheesy

Anyway, show me the damages I've done to you. Which is nothing other than your sites relutation, which I think is fair - an eye for an eye. I regularly try to break into sites, and I always disclose it to the owners without any malicious damages done. For some people, I do it publicly.

Here: htmlentities( [db output] ). It's funny how there is so many responses yet no one knows basic web security.

Topic: SCAMMER TradeFortress P-T'ed my site without permission, no damage afaik. CLOSED - page 2. (Read 5468 times)