/hf/ - Hack Funk

Email
Subject
Comment *
File *	Select/drop/paste files here
* = required field	[▶ Show post options & limits] Confused? See the FAQ.

Options	Do not bump (you can also write sage in the email field) Spoiler images (this replaces the thumbnails of your images with question marks)
Password	(For file and post deletion.)
Allowed file types:jpg, jpeg, gif, png, webm, mp4, pdf Max filesize is 8 MB. Max image dimensions are 10000 x 10000. You may upload 3 per post.

File: 1422266003394.jpg (41.7 KB, 404x256, 101:64, sqli.jpg)

/hf/ - SQLi (part 1) Anonymous 01/26/15 (Mon) 09:53:23 No.40[Reply]

SQL injection is a code injection technique, in which malicious SQL statements are inserted into an entry field for execution.
What you'll need -

*A list of dorks, I got these for you:
http://www.mediafire.com/download/lzy8cjo52xct1m4/Dorks.txt

*A functioning brain (50% of you can stop reading here)

We'll be covering manual and blind SQLi injection, No Havij.

Step №1 - Check for vulnerability
You can either use a vulnerability scanner or manually check websites, it's up to you.

Using the lists of dork, find a website, let's say we found www.halfchan.org/news.php?id=4
Post too long. Click here to view the full text.

6 posts omitted. Click reply to view.

Anonymous 03/10/16 (Thu) 15:16:37 No.145

Would this be the error in step2 - the 'order by'?

Warning: mysql_fetch_assoc() expects parameter 1 to be resource, boolean given in /home1/zeoworks/public_html/game.php on line 21

File: 1421914004390.png (33.12 KB, 256x256, 1:1, hansen.png)

Anonymous 01/22/15 (Thu) 08:06:44 No.2[Reply]

Welcome to /hf/ - Hack Funk

This is an info and discussion board regarding hacking, cracking, skidding and all malicious security acts.

Discussed topics can be but not limited to:

Botnets, IRC Bots, and Zombies,

Cryptography, Encryption, and Decryption

Pentesting and Forensics,

Decompiling, Reverse Engineering, Disassembly, and Debugging,

Worms, Malware, and Viruses,

Doxing, Personal Information Masking, Databases, Anonymity.

Feel free to ask newbie or stupid questions.

Feel free to discuss anything else related.

Global Rules Enforced

Don't be dumb.

The shill project is active.

Post last edited at 02/22/16 (Mon) 12:40:02

File: 1457914341034.png (7.91 KB, 66x92, 33:46, combo-9@2x.png)

Tracing a phone # (TextMe app) Anonymous 03/14/16 (Mon) 00:12:20 No.146 [Reply]

Heyo /hf/,

i am having a little bit of a problem. help me trace and shut it down? it's in the TextMe app. 843-888-8602

help pls. harrassment is the reason it needs to be taken care of. don't think it's just because i want to shut it down. help IDing it?

2 posts and 1 image reply omitted. Click reply to view.

Anonymous 03/14/16 (Mon) 19:26:13 No.150

>>148

Is that their cellphone number?

If so, textbomb it and brick it

Anonymous 03/15/16 (Tue) 01:10:17 No.151

i would textbomb, but….. im kinda new to this. (n00b, i know.)

help pls ;-;

Anonymous ## Board Owner 03/15/16 (Tue) 01:40:56 No.152

>>151

You can't expect anyone here to actually SMS bomb and brick a cellphone for you, Google for an SMS bomber, or buy one, and do it yourself.

I don't know how you got a girlfriend when you can't even SMS Bomb.

Anonymous 03/15/16 (Tue) 12:20:30 No.153

Hey, c'mon. i'm not a hacker really, just a huuuuuge programmer.

Anonymous 03/15/16 (Tue) 17:58:41 No.154

Boardowner,

pls delete my and my gf's posts. we found out who it is.

File: 1457977854844.png (Spoiler Image, 161.44 KB, 1366x768, 683:384, Screenshot 2016-03-14 at 1….png)

text me app Anonymous 03/14/16 (Mon) 17:50:54 No.149 [Reply]

I have a number that is harassing me and my boyfriend I would like it to be taken down now

File: 1456747405025.png (218.15 KB, 947x586, 947:586, fasfasdfasdf.PNG)

Anonymous 02/29/16 (Mon) 12:03:24 No.122 [Reply]

This thread will be used to manipulate 8chan's Unique Users system to get this board to the top frontpage boards list, hopefully not getting us rekt by HW.

And HW, if you see this and you are upset…

"It's just a park bro"

16 posts omitted. Click reply to view.

Anonymous 03/01/16 (Tue) 19:31:22 No.139

Anonymous 03/02/16 (Wed) 02:49:50 No.140

panda panda panda

Anonymous 03/02/16 (Wed) 02:55:07 No.141

adas

Anonymous 03/02/16 (Wed) 02:57:00 No.142

lec

Anonymous 03/04/16 (Fri) 17:37:35 No.143

Bernie wheel, Bernie deal

File: 1456610029421.gif (2.1 MB, 400x225, 16:9, djkhaledanotherone.gif)

Anonymous 02/27/16 (Sat) 21:53:49 No.121 [Reply]

can u guys mess up flockdraw more

File: 1456488760923.png (18.11 KB, 367x274, 367:274, kikme.PNG)

Kik Me - Kik Bot Anonymous 02/26/16 (Fri) 12:12:40 No.120 [Reply]

The newest version of this bot costs $15, what a joke, here it is for free.

Scan: https://www.virustotal.com/sv/file/e6665ed962ba950c1748e946c332b4c93fca7c38132c7b081268df311fcc5fa6/analysis/1427288237/

If you don't trust, sandboxie it.

File: 1421974382864.png (274.37 KB, 1000x1515, 200:303, 104owup.png)

Leak Thread Anonymous 01/23/15 (Fri) 00:53:02 No.11 [Reply]

Dumping HF product leaks here.
Steam Grinder Leak =
http://ge.tt/62LDG982/v/0?c

pass is steam11

7 posts and 4 image replies omitted. Click reply to view.

Anonymous 01/29/15 (Thu) 03:13:10 No.53

>>51

Those are attack sites by the way

Repfuck Anonymous 01/29/15 (Thu) 08:52:03 No.54

>>51
Use a direct link:
http://ge.tt/api/1/files/4SOUkW62/0/blob?download

Anonymous 02/05/15 (Thu) 15:39:56 No.62

>>51

same here, doesn't work for me, even with the direct link here >>54

Anonymous 02/24/16 (Wed) 01:13:42 No.118

>>62

>>54

Direct link worked for me.

Anonymous 02/24/16 (Wed) 10:39:19 No.119

>>118

The links work perfectly.

File: 1456263041792.gif (241.26 KB, 750x500, 3:2, shillmasterHF.gif)

Leech and L33T Day - Spotify Anonymous ## Board Owner 02/23/16 (Tue) 21:30:41 No.117 [Reply]

Here's some accounts, feel free to leech, a thanks in this topic would be appreciated though.

mattfriddle@yahoo.com:bigdawg

vulmer@interbaun.com:jessesmom

Chop1398@gmail.com:05tibby

chezloeber@yahoo.com:ss7833

lauren@queso.com:mintchip4me

shawn.gaskill@vfemail.net:Kodiak_09

jelthompson@comcast.net:s0uth3rn

fdc_chief@hotmail.com:hondarule

robinandersen@me.com:andersen5

They're unchecked, but I'm pretty sure they're all premium, if they're not, let me know and I'll post prems.

File: 1422057330616.jpg (28.96 KB, 620x465, 4:3, pipebomb.jpg)

Pyrotechnics General Anonymous 01/23/15 (Fri) 23:55:30 No.18 [Reply]

How to make a pipe bomb, no gunpowder.

1) GO TO YOUR LOCAL HARDWARE STORE AND TELL THE GUY THAT IS HELPING YOU
THAT YOU WANT A PIECE OF STEEL PIPE ONE FOOT LONG. AND ALSO THAT YOU WANT
THE ENDS THREADED AND YOU ALSO WANT CAPS TO PUT ON THE END.

2) NOW GET AHOLD OF A BABYFOOD JAR. MAKE SURE THAT THE JAR WILL FIT DOWN
THE PIPE REAL EASY LIKE. FILL THE BABYJAR WITH EVERYDAY VINEGAR. MAKE
SURE THE TOP IS SCREWED ON REAL TIGHT. **IF IT IS LOOSE YOU WILL BLOW YOUR
HAND OFF**

3)NOW CAP ONE END OF YOUR PIPE WITH ONE OF THE CAPS THAT YOU SHOULD HAVE
PICKED UP WITH THE PIPE. IF YOU KNOW OF SOMEONE WITH A WIELDER, HAVE HIM
WIELD A BEAD AROUND THE THREADS AFTER YOU HAVE IT CAPPED.
Post too long. Click here to view the full text.

2 posts and 1 image reply omitted. Click reply to view.

Anonymous 02/22/16 (Mon) 13:02:36 No.110

>>109

The pipe itself doesn't blow up, the jar inside does, the point of the entire thing is having the jar at the bottom of the pipe, from what I understood

I'm not OP

Anonymous 02/22/16 (Mon) 13:11:23 No.111

>>110

The jar contains the vinegar, and OP said to fill the rest of the pipe with baking soda once the jar and the rocks are inside, the point being when you break the jar inside both mix and it *cough-bullshit-cough* explodes due the pressure inside

Anonymous 02/22/16 (Mon) 13:22:56 No.112

>>111

Can you link me to a proper guide for a pipe bomb? or any bomb for that matter?

I have a large open area and I love pyrotechnics.

Anonymous 02/22/16 (Mon) 13:43:21 No.114

>>112

See link at

>>109

You can also use the deep web to look for instructions unless you want to be randomly selected by TSA agents when boarding your next flight.

Anonymous 02/22/16 (Mon) 13:47:55 No.115

>>114

Thanks.

Although, I live in a country where there is little to none internet information invasion, so I'm good.

File: 1455930430021.jpg (31.98 KB, 458x250, 229:125, vulnerability-scanner-wvs.jpg)

Acunetix Web Vulnerability Scanner 10 - For Free Anonymous 02/20/16 (Sat) 01:07:09 No.107 [Reply]

Here's a cracked version of one of the best Vulnerability scanners out there.

Marketed for 'securing your own website' (bullshit)

Use this to find vulnerabilities in websites you want to target.

https://mega.nz/#!gppCjAYZ!NPq23hpdswy3EMtG1OVGEvGhenEod0BcQ0K2Fx1qn1w

Run sandboxied/vmware'd if you don't trust.

Anonymous 02/20/16 (Sat) 07:04:43 No.108

Better than the Pakistani one

File: 1455798512344.png (11.35 KB, 641x265, 641:265, 6Cagcv8.png)

Deobfuscator for Confuser. Anonymous ## Board Owner 02/18/16 (Thu) 12:28:32 No.106 [Reply]

Here's a little gift I'd enjoy throwing at whoever passes by from time to time.

Find software obfuscated by Confuser

Use this to Deobfuscate

Publish source, acquire internet honor

VirusTotal:

https://www.virustotal.com/en/file/077d8...374643067/

Download:

https://mega.co.nz/#!xgtHXTyK!Icqh32FO8hCYBVFs0z78bR-rBFUY7OOAl4vYHdrnvlc

Run sandboxie'd if you don't trust, don't whine. :)

File: 1452654402923.jpg (49.8 KB, 625x540, 125:108, normaalflikkers.jpg)

Holy shit Anonymous 01/13/16 (Wed) 03:06:42 No.104 [Reply]

I never knew 8chan had a HF like board.

HF oldfag (Mar 2009) here, god damnn that site has gone to pure cancer thanks to My Mum himself. Had many fun times but the last few years I left and very rarely login to get random shit like accounts or something.

File: 1424556946817.png (2.22 KB, 220x229, 220:229, sqlinject.png)

HelpMeSqlinject Ashur 02/21/15 (Sat) 22:15:46 No.73 [Reply]

Hello.

I have been looking for a weak .php site and i finally found one. http://www.blacksys.co.kr/eng/product/product.php?id=8

so, first what i did was adding an ' after id=8

then i got this error: Warning: mysql_fetch_array(): supplied argument is not a valid MySQL result resource in /home/bsys/public_html/eng/product/product.php on line 8

And now i'm trying to see how many tables by using: order by 100/* and still getting the error. I can even add order by 1000/* and the are still showing

(yes i'm new to this and do not want to use Havij).

Any tips and tricks?

1 post omitted. Click reply to view.

Anonymous 03/09/15 (Mon) 22:06:43 No.84

>>76
yes plz

!!Bo8eeQiEsM 03/10/15 (Tue) 00:11:49 No.85

>>84
11 columns, which would be order by 12/* = returning no error

so 11.

Anonymous 12/04/15 (Fri) 13:48:06 No.100

i got Warning: mysql_fetch_array:() supplied argument is not a valid MySQL result resource in /home/bsys/public_html/eng/product/product.php on line 11

Anonymous 12/05/15 (Sat) 08:13:49 No.101

>>100

>posting this on a board that hasn't gotten any posts for months and hasn't gotten more than 100 until now

Anonymous 12/10/15 (Thu) 15:19:47 No.102

>>101

pls stop

>>100

you forgot to order

File: 1422059809065.jpg (23.85 KB, 300x342, 50:57, w9uusl.jpg)