7 ms·
Hacker Releases a How-To Video Targeting Police
- danso 10y agoThis guy is amazing. I can't even upload videos in the public domain (old movies) without getting an auto-takedown from YouTube's content algorithm...somehow he manages to post a video that includes one of the most famous tracks in rap history? (slightly less non-facetious question: maybe NWA has asked YouTube to whitelist their work?) More relevant comment, as if it were going to be a big surprise: the attack vector was SQL injection into what appears to be a custom built PHP site: https://youtu.be/QoSrjrYC3hI?t=6m16s https://youtu.be/QoSrjrYC3hI?t=6m16s
- anc84 10y agoWell, at least in Germany it is blocked: Unfortunately, this video is not available in your country because it could contain music from UMG, for which we could not agree on conditions of use with GEMA.
- peterwwillis 10y agohttp://www.clipconverter.cc/download/SrakCrS6/246323557/ http://www.clipconverter.cc/download/SrakCrS6/246323557/
- Mandatum 10y agoMirror as at 5AM Friday UTC: https://tune.pk/video/6528544/hack https://tune.pk/video/6528544/hack
- whamlastxmas 10y agoThanks, been waiting for one.
- _0ffh 10y agoproxychains youtube-dl https://www.youtube.com/watch?v=QoSrjrYC3hI https://www.youtube.com/watch?v=QoSrjrYC3hI
- mdaniel 10y agoThat may be easier if you already have proxychains on your machine, and/or integrated into your workflow, but FYI youtube-dl has built-in proxy support with `--proxy URL`
- csdrane 10y agoSomeone should host a mirror--Youtube just pulled it.
- whamlastxmas 10y agoUnder the "scams" category no less, what a crock.
- vanous 10y agoSo be quick: youtube-dl https://www.youtube.com/watch?v=QoSrjrYC3hI https://www.youtube.com/watch?v=QoSrjrYC3hI Edit: this was quite entertaining... felt like a kid watching lets-plays... we need more such youtubers. Also, he (?) was very fluent all the time, except the second tar cvf :) https://xkcd.com/1168/ https://xkcd.com/1168/
- deleted 10y ago[deleted]
- peterwwillis 10y agoSo YouTube becomes a new sort of interactive Phrack. Neat. I also wish more online tutorials had great soundtracks like this; i'd probably watch more of them.
- medecau 10y agoOpen two tabs?
- peterwwillis 10y agoI'm not sure my system could take Firefox with two tabs open, I only have 4GB of RAM.
- emp_zealoth 10y agomotherfucking "modern web" ive bought two pc's with 16gb of ram in 8gb sticks just so i can double it to handle even more retarded java/css/webscale cancer #rant
- dublinben 10y agoEven though you're clearly not serious, I can recommend using VLC to watch YouTube videos. It is much more efficient than a browser.
- csdrane 10y agoThe author isn't actually Chema Alonso [1] as the terminal session would lead you to believe, right? [1] https://twitter.com/chemaalonso https://twitter.com/chemaalonso
- dewyatt 10y agoI'm thinking it's just misdirection (along with some other parts of the video). I saw some nice attention to detail in the video so I would be surprised if something like that was an accident.
- csdrane 10y agoSeeing as how the person he is allegedly imitating also works in security and ostensibly would have the means to commit the hack--and who is also Spanish--this seems like a shitty thing to do.
- dewyatt 10y agoDefinitely a shitty thing to do, I can't imagine law enforcement won't investigate Chema after seeing that. I don't understand the language though so there may be other relevant details I'm missing.
- deleted 10y ago[deleted]
- chatmasta 10y agoNo way. I also noticed that it's 23:14 on his local time, and 05:14 on the local time of the VPS. Assuming he didn't change his clock, that tells you he's 6 hours behind the VPS.
- zwp 10y agoWe also see TZ "CLT" aka "Chilean Standard Time" (4 hours left of UTC, 6 hours left of Spain) which fits neatly with previous speculation (here and elsewhere) of Chilean origin (language characteristics). Assuming it's not all carefully orchestrated or multiple correspondents or...
- curiousgal 10y agoWhat do ya know, a blackhat with an agenda other than attention and money.
- giancarlostoro 10y agoWouldn't that be called a greyhat then?
- scottshea 10y agoI have always thought of greyhats as hackers employed by governments to hack political allies and opponents or by companies for corporate espionage
- hulahoof 10y agoPersonally I view greyhat as immoral/unethical but not illegal
- giancarlostoro 10y agoI guess it could be both... Greyhat is the in-between from white which I would assume is anyone doing secure systems vs. blackhat which is full on attacks. The greyhat sits somewhere in between, not specifically part of the government. Elliot from Mr. Robot would of been a Greyhat in my book. Though if they work for the government it depends on whom you tell and what the hacker we're talking about is doing, some could easily consider them blackhat government hackers... while others completely white, and of course you would consider them gray.
- peterwwillis 10y agoThe term is "hacktivist"
- gh-lfneu28 10y agoAmazing OC. Easy to follow, great ost, really punches in the fragility of the modern web.
- curiousgal 10y agoAny idea why he renamed the final tar file to index.htm before wgeting it?
- medecau 10y agoWhen looking through the logs index.htm will look like index.html and may be missed. But, I have no experience exfiltrating files or gaining access to servers I don't own.
- exabrial 10y agoTargeting police? Really? How about we start targeting the corrupt officials instead that employ them. More Panama like leaks please.
- josu 10y agoLike when he exposed governments worldwide using the services of Hacking Team to unconstitutionally spy on their constituents? >The pseudonymous hacker behind the catastrophic breach of notorious police surveillance tool seller Hacking Team is now teaching others how to hack.
- spacemanmatt 10y agoPolice agencies have their own corruption, they're not the uncorrupted tools of their bosses.
- jfolkins 10y agoHe sets the month and day correctly but gets the year wrong here. https://youtu.be/QoSrjrYC3hI?t=32m https://youtu.be/QoSrjrYC3hI?t=32m Watch out kids. Typos happen to everyone. Hopefully it isn't the command that dox's oneself.
- jfolkins 10y agoscreenshot http://i.imgur.com/m3TPBIy.jpg http://i.imgur.com/m3TPBIy.jpg
- scorp1000n 10y agoanyone saved the video ? Please share. you tube pulled it down
- FooNull 10y agoCheck his twitter: https://twitter.com/GammaGroupPR/status/733347252605947906 https://twitter.com/GammaGroupPR/status/733347252605947906
- deleted 10y ago[deleted]
- ch3ll0v3k 10y ago360px 480px 720px https://cw009.tunefiles.com/files/videos/2016/05/19/14636711761dbc6-360.mp4 https://cw009.tunefiles.com/files/videos/2016/05/19/14636711... https://cw009.tunefiles.com/files/videos/2016/05/19/14636711761dbc6-480.mp4 https://cw009.tunefiles.com/files/videos/2016/05/19/14636711... https://cw009.tunefiles.com/files/videos/2016/05/19/14636711761dbc6-720.mp4 https://cw009.tunefiles.com/files/videos/2016/05/19/14636711...
- snowwindwaves 10y agoThose tools are pretty amazing the way you give it an URL and it gives you a database shell
- yagop 10y agoThere are some mirrors posted on Hacker's Twitter: https://twitter.com/GammaGroupPR/status/733347252605947906 https://twitter.com/GammaGroupPR/status/733347252605947906