How I attacked a fellow student
shaanan.cohney.info
How I attacked a fellow student
1–10 of 50 posts
Re: How I attacked a fellow student
#2Google cache: http://webcache.googleusercontent.com/search?hl=en&q=cac... (Page is taking some time to load.)
Re: How I attacked a fellow student
#3Duplicate.
Re: How I attacked a fellow student
#4> With this level of trust it would be feasible to gain access to information protecting online accounts, a very scary thought.
Does he mean 'feasible to gain access to login information for online accounts'? I have read the page, and i'm not seeing it. Yes, according to the page they had access to some degree of personal information beyond the more publicly accessible. But that isn't the same as having access to their online accounts, or being near to getting it.
Re: How I attacked a fellow student
#5> With this level of trust it would be feasible to gain access to information protecting online accounts, a very scary thought. Does he mean 'feasible to gain access to login information for online accounts'? I have read the page, and i'm not seeing it. Yes, according to the page they had access to some degree of personal information beyond the more publicly accessible. But that isn't the same as having access to the…
My impression was that he meant that at that point it was potentially viable to scam some financial information out of the target.
Re: How I attacked a fellow student
#6You would have been better off forcing them to register on your site to submit the resume, then check if they reused a password. Also you exploited trust in a way that could easily lead back to you.
Re: How I attacked a fellow student
#7I was hoping that by getting them to sign up with the recruiter you would have used that to intercept communication.
Re: How I attacked a fellow student
#8Is Xrecruting.com a typo in the blog post, or in the domain actually registered?
Re: How I attacked a fellow student
#9> With this level of trust it would be feasible to gain access to information protecting online accounts, a very scary thought. Does he mean 'feasible to gain access to login information for online accounts'? I have read the page, and i'm not seeing it. Yes, according to the page they had access to some degree of personal information beyond the more publicly accessible. But that isn't the same as having access to the…
I meant that with that level of trust it wouldn't be too hard to adapt the attack to shift to gaining that sort of information. ie; We are adding you to our employee database but we need your SSN last 4.
Re: How I attacked a fellow student
#10Duplicate.
could you link me to where the original is?