3 ms·
I thought the form fields were suspicious. The scammer may already have something in place that generates random user/pass form fields, and even random endpoin
by legohead 8y ago
I thought the form fields were suspicious. The scammer may already have something in place that generates random user/pass form fields, and even random endpoints by the look of the url.
The "engineer" didn't check this, which he could have easily done by simply refreshing the page. But if the scammer did have any sort of protection, the engineer would have had a lot more work in it for him, having to scrape the page.. so maybe he purposely ignored this red flag.
- jamra 8y agoI think he did check it and the video we saw was the fast version of this process for the sake of the viewer. But that’s just what my instincts tell me based on the time spent investigating, the amount of useful snippets, and the lack of typos and errors while coding.
- pavel_lishin 8y agoThere's no need to put engineer in quotes. This video wasn't an in-depth how-to; it was just a quick proof-of-concept.
- legohead 8y agoIt wasn't meant as an attack. I don't know his name, but his channel is called engineer-something, so I meant it as "engineer-something". Although I do think, for a learning video, that he missed out on a lot of opportunity to explain such things as I mentioned.
- eat_veggies 8y agoI checked out the page myself, and the endpoints and form fields are the exact same for me. Also, there's some funny exposed PHP code sent along: <?php session_start(); ?> And some packed javascript that does nothing because it's "commented out" with <!-- ... --> inside the <script> tags, meaning it has syntax errors.