Shit that shouldn't be so easy in 2020 General
lainchan / sec

----------------------------------------------------------------------
I guess this is: · 2020-11-07 03:21

>find basic trolling forum, want to see if I can fuarrrk with it to
learn about automation and pentest skills
>sign up requires reCAPTCHA but no email, login doesn't seem to have
captcha
>if login can be automated, then switching accounts should be easy to
automate
>want to see if sneaky captcha loads only after start filling in form
(it does on some sites)
>user 'testtest'
>nothing appears
>pw 'testtest'
>nothing appears
>enter
>it's a valid account
I wonder how many I can pop just doing predictable combinations like
'password':'password'. Will report back if interesting.

----------------------------------------------------------------------
Dr. X · 2020-11-07 03:42

>>12957
What site is this?

----------------------------------------------------------------------
Nell · 2020-11-07 03:47

it's shockingly easy to get in most systems and accounts with simple
passwords, if your lucky try a pass list with season:year things like
Winter2018 is a pretty common password on accounts.

----------------------------------------------------------------------
Agent Jones · 2020-11-07 03:54

>>12958
Not saying just yet, but I had similar results on thedonald.win
(similar situation where they clearly took software and modified it
without understanding how to safely do so)

>>12959
My old workplace had a similar wifi password convention but didn't
updated it as the time went along, so it would still be like
Spring2017.

----------------------------------------------------------------------
HELIOS · 2020-11-07 04:14

>>12958
He didn't say... Maybe it was Voat, they have an API and are infested
already.

----------------------------------------------------------------------
Agent Richard Gill · 2020-11-07 04:30

>>12962
Oh god, it's like Reddit fuarrrked a goat. I hope he's giving it a
good bashing