6 ms·

Pastebin with translated guide on how they hacked the bank: https://pastebin.com/8rXhtqgr https://pastebin.com/8rXhtqgr

Miner49er 7y ago
Also contains some info on how they hacked Hacking Team and Gamma Group. Edit: Also a $100k bounty for future hacks on certain types of companies.
- Thriptic 7y ago
  She also attacked the Barcelona police department, the Turkish government, and stole money from various Bitcoin wallets to donate to the Kurds iirc. Her write-ups are always really great reads and very enlightening.
  - Sendotsh 7y ago
    Is there a collection of her write-ups somewhere?
    - Thriptic 7y ago
      These are the ones I am aware of: https://pastebin.com/0SNSvyjJ https://pastebin.com/0SNSvyjJ http://pastebin.com/raw.php?i=cRYvK4jb http://pastebin.com/raw.php?i=cRYvK4jb https://m.youtube.com/watch?v=oI_ZhFCS3AQ https://m.youtube.com/watch?v=oI_ZhFCS3AQ
  - trenning 7y ago
    Where can we find her blog or wherever she posts? I only see a link to a translated pastbin. Or was it in there? I was just skimming it a bit so far but can't really read it until tonight.
    - Thriptic 7y ago
      Please see the other child post
  - justinjlynn 7y ago
    Their pronouns are they/them. https://twitter.com/DDoSecrets/status/1196397044644163585 https://twitter.com/DDoSecrets/status/1196397044644163585
    - Thriptic 7y ago
      Sorry where are you seeing that from that link?
      - justinjlynn 7y ago
        Sorry, I posted the wrong link. :/ See sibling response to my post for the correct link: https://mobile.twitter.com/DDoSecrets/status/1196216685038129153 https://mobile.twitter.com/DDoSecrets/status/119621668503812...
    - paulirish 7y ago
      I think you got the wrong URL. Here you are: https://mobile.twitter.com/DDoSecrets/status/1196216685038129153 https://mobile.twitter.com/DDoSecrets/status/119621668503812...
      - justinjlynn 7y ago
        Ah, darn it. Yeah, I did. Oops. Cheers.
52-6F-62 7y ago
This is a fascinating read... I hope it does make the news.
badrabbit 7y ago
It doesn't tell you how they infiltrated to begin with so that they can sniff cookies and keystrokes. But my guess is they phished an employee. Edit: I missed that part,sorry.
- pvitz 7y ago
  He explicitly mentions how he exploited it and that at the same time, somebody else tried to phish...
  - bowmessage 7y ago
    She!
    - deleted 7y ago
      [deleted]
    - cookie_monsta 7y ago
      This is not a hill that I am willing to die on, but when was gender decided? Everything I've read up until now has kept it ambiguous: https://mobile.twitter.com/DDoSecrets/status/1196216685038129153 https://mobile.twitter.com/DDoSecrets/status/119621668503812...
      - bowmessage 7y ago
        Sorry, didn't mean to turn this into a hill at all :) It was called out in the pastebin in the comment originating this chain.
      - Lyrex 7y ago
        If my memory serves correctly then she said something along the lines "I'm just a girl" in the writeup pastebin.
      - cocochanel 7y ago
        Stated in the readme file, "I was a girl raised by the internet."
newnewpdro 7y ago
> Dell had setuid’d root on dos2unix, leaving the device easy to root. Yikes.

Also contains some info on how they hacked Hacking Team and Gamma Group. Edit: Also a $100k bounty for future hacks on certain types of companies.

Thriptic 7y ago
She also attacked the Barcelona police department, the Turkish government, and stole money from various Bitcoin wallets to donate to the Kurds iirc. Her write-ups are always really great reads and very enlightening.
- Sendotsh 7y ago
  Is there a collection of her write-ups somewhere?
  - Thriptic 7y ago
    These are the ones I am aware of: https://pastebin.com/0SNSvyjJ https://pastebin.com/0SNSvyjJ http://pastebin.com/raw.php?i=cRYvK4jb http://pastebin.com/raw.php?i=cRYvK4jb https://m.youtube.com/watch?v=oI_ZhFCS3AQ https://m.youtube.com/watch?v=oI_ZhFCS3AQ
- trenning 7y ago
  Where can we find her blog or wherever she posts? I only see a link to a translated pastbin. Or was it in there? I was just skimming it a bit so far but can't really read it until tonight.
  - Thriptic 7y ago
    Please see the other child post
- justinjlynn 7y ago
  Their pronouns are they/them. https://twitter.com/DDoSecrets/status/1196397044644163585 https://twitter.com/DDoSecrets/status/1196397044644163585
  - Thriptic 7y ago
    Sorry where are you seeing that from that link?
    - justinjlynn 7y ago
      Sorry, I posted the wrong link. :/ See sibling response to my post for the correct link: https://mobile.twitter.com/DDoSecrets/status/1196216685038129153 https://mobile.twitter.com/DDoSecrets/status/119621668503812...
  - paulirish 7y ago
    I think you got the wrong URL. Here you are: https://mobile.twitter.com/DDoSecrets/status/1196216685038129153 https://mobile.twitter.com/DDoSecrets/status/119621668503812...
    - justinjlynn 7y ago
      Ah, darn it. Yeah, I did. Oops. Cheers.

52-6F-62 7y ago

This is a fascinating read... I hope it does make the news.

badrabbit 7y ago

It doesn't tell you how they infiltrated to begin with so that they can sniff cookies and keystrokes. But my guess is they phished an employee. Edit: I missed that part,sorry.

pvitz 7y ago
He explicitly mentions how he exploited it and that at the same time, somebody else tried to phish...
- bowmessage 7y ago
  She!
  - deleted 7y ago
    [deleted]
  - cookie_monsta 7y ago
    This is not a hill that I am willing to die on, but when was gender decided? Everything I've read up until now has kept it ambiguous: https://mobile.twitter.com/DDoSecrets/status/1196216685038129153 https://mobile.twitter.com/DDoSecrets/status/119621668503812...
    - bowmessage 7y ago
      Sorry, didn't mean to turn this into a hill at all :) It was called out in the pastebin in the comment originating this chain.
    - Lyrex 7y ago
      If my memory serves correctly then she said something along the lines "I'm just a girl" in the writeup pastebin.
    - cocochanel 7y ago
      Stated in the readme file, "I was a girl raised by the internet."

newnewpdro 7y ago

> Dell had setuid’d root on dos2unix, leaving the device easy to root. Yikes.