• How to hack a bank ~ SSL/

    From System@VERT/ETOW to DOVE-Net.Programming on Sat Jun 11 14:51:00 2011
    How to hack a bank ~ ssl/https exploit

    Ok, so all our banks seem to have https interfaces and alot of people bank

    over the web.

    unlike cracking a wep key or an ssh cipher, you don't need alot of packets

    to crack https/ssl, it's very outdated and extremely insecure.

    Everything you need to crack the transmission is included in the

    transmission and you don't even really need to crack it.

    A decent hacker could use a packet sniffer and with no programming knowledge

    or math skills just replay the packets sniffed.. instant access to your bank

    account.. if the hacker has crypto, programming, and math skills, he/she

    could easily decrypt the transmission, get you account information and pass

    it around. Although ssl/https could easily be cracked by a 12 year old kid,

    I'm not posting exact details here for obvious reasons.

    Basically, all the banks with online access are vulnerable, I've already

    developed a secure method of ssl over compounded ssh2 ciphers that is

    incredibly more secure and it's currently ready for implimentation.

    Who will be the first bank to actually become secure? Well, I'm pretty sure

    this exploit is gonna be a round for a while, and the chances of this

    message reaching the perception of a bank owner or other decision maker

    concerning how the money gets spent thqat isn't completely braindead is

    actually quite low.

    chances are you will soon see this exploit all over the world in detail.

    There is a possibility of the entire banking industry altogether.

    If some bank owner wants the solution implimented by me, let him/her drop

    his/her contact info in the consideration box at magizian.hopto.org

    If some government/military wants the goods instead, the price is about the

    same but also includes the instillation of a national corporate tax break

    based on number of employees rather than revenue so that we can actually

    have enough jobs for number of bodies ( a surplus would be good ), boost

    gdp, and begin closing the growing gap between aristocracy and peasants,

    diminish crime, etc.. my proposed formula is: the incentive times number of

    employees times average employees salary.

    simple huh?

    If you just want to know how to crack ssl/https, don't even bother asking

    unless your wealthy enough to bribe me and willing to get consideration via

    magizian.hopto.org first

    I can prove the exploit and resolution but won't be doing so for free.

    Have a nice day,

    Hunter Reon Barnes

    ---
    ■ Synchronet ■ Door Distribution for W&W and EVP - TELNET://etow.synchro.net
  • From System@VERT/ETOW to DOVE-Net.Programming on Wed Jun 15 15:15:00 2011
    How to hack a bank ~ SSL/HTTPS exploit (The Defence)

    Since the exploit in explicit detail will probably soon be posted.
    I'm open sourcing the defense first.. I seriously doubt any of the braindead will impliment the defense or hire me or buy anything from me.. but for the masses.. here you go.

    While everything needed to crack SSL (which is open source) is contained within the transmission, the following method would require millions of packets to even begin decrypting plus knowledge is required too..

    SSL/HTTPS over several compounded SSH2 ciphers over SSL/HTTPS or just SSL/HTTPS over several compounded ssh2 ciphers:

    say my server was a bank... and your doing online transactions or checking your account balance... it's not as secure as you think..
    ...but if you make a dynamic SSH2 tunnel to my server, then do it again over that connection using a different cipher, and repeat.. then over that connection access my servers https (usually port 443) there wouldn't be
    enough transmission to crack.

    you could actually go alot more secure than this, but this can be
    implimented without any modification to what the banks are already running.

    and if anyone reading doesn't understand this simple material and wants it even more simplified, they can buy consideration of existance from me..
    before even bothering to ask.

    and if your looking for the exploit in detail for educational purposes, it will probably be released soon, just keep googling "how to hack a bank ~ SSL/HTTPS expliot (attack)

    It's not that they don't believe it's a reality... I think they want insecurity under the guise of actual security.. but for those of us that aren't braindead.. realities are more important than appearances.

    Hunter Reon Barnes
    The Magizian

    ---
    ■ Synchronet ■ Door Distribution for W&W and EVP - TELNET://etow.synchro.net
  • From Blueknight@VERT to System on Fri Jun 17 23:20:06 2011
    How to hack a bank ~ SSL/HTTPS exploit (The Defence)

    Since the exploit in explicit detail will probably soon be posted.
    I'm open sourcing the defense first.. I seriously doubt any of the
    braindead will impliment the defense or hire me or buy anything from me.. but for the masses.. here you go.

    While everything needed to crack SSL (which is open source) is contained within the transmission, the following method would require millions of packets to even begin decrypting plus knowledge is required too..

    SSL/HTTPS over several compounded SSH2 ciphers over SSL/HTTPS or just SSL/HTTPS over several compounded ssh2 ciphers:

    say my server was a bank... and your doing online transactions or checking your account balance... it's not as secure as you think..
    ...but if you make a dynamic SSH2 tunnel to my server, then do it again
    over that connection using a different cipher, and repeat.. then over that connection access my servers https (usually port 443) there wouldn't be enough transmission to crack.

    you could actually go alot more secure than this, but this can be implimented without any modification to what the banks are already running. and if anyone reading doesn't understand this simple material and wants it even more simplified, they can buy consideration of existance from me.. before even bothering to ask.

    and if your looking for the exploit in detail for educational purposes, it will probably be released soon, just keep googling "how to hack a bank ~ SSL/HTTPS expliot (attack)

    It's not that they don't believe it's a reality... I think they want insecurity under the guise of actual security.. but for those of us that aren't braindead.. realities are more important than appearances.

    Hunter Reon Barnes
    The Magizian

    ---
    ■ Synchronet ■ Door Distribution for W&W and EVP - TELNET://etow.synchro.net
    I think you should not be posting such ideas. No offense but you may be borderline criminal here. Just wondering?
    BlueKnight

    ---
    ■ Synchronet ■ Vertrauen ■ Home of Synchronet ■ telnet://vert.synchro.net
  • From Ree@VERT to System on Tue Jun 28 07:58:29 2011
    and if your looking for the exploit in detail for educational purposes, it will probably be released soon, just keep googling "how to hack a bank ~ SSL/HTTPS expliot (attack)

    I don't think I'll be holding my breath waiting for that...

    ---
    ■ Synchronet ■ Vertrauen ■ Home of Synchronet ■ telnet://vert.synchro.net
  • From Siv@VERT/LHQ to Ree on Tue Jun 28 12:10:04 2011
    Re: Re: How to hack a bank ~ SSL/
    By: Ree to System on Tue Jun 28 2011 03:58:29

    and if your looking for the exploit in detail for educational purposes, it will probably be released soon, just keep googling "how to hack a
    bank ~ SSL/HTTPS expliot (attack)

    I don't think I'll be holding my breath waiting for that...

    This made me giggle a lot. :D

    Because googling "how to hack a bank" is something I want
    in *my* search history. Nothing could possibly go wrong,
    and certainly nobody could ever misinterpret that as
    potential criminal activity. Not ever.


    ---
    ■ Synchronet ■ LEGiON HQ | 517 Reborn in 80x25 | SSH ONLY | bbs.legionhq.net
  • From Weedhopper@VERT to Siv on Tue Jun 28 19:33:09 2011
    Re: Re: How to hack a bank ~ SSL/
    By: Siv to Ree on Tue Jun 28 2011 08:10 am

    Re: Re: How to hack a bank ~ SSL/
    By: Ree to System on Tue Jun 28 2011 03:58:29

    and if your looking for the exploit in detail for educational purposes, it will probably be released soon, just keep googling "how to hack a bank ~ SSL/HTTPS expliot (attack)

    I don't think I'll be holding my breath waiting for that...

    This made me giggle a lot. :D

    Because googling "how to hack a bank" is something I want
    in *my* search history. Nothing could possibly go wrong,
    and certainly nobody could ever misinterpret that as
    potential criminal activity. Not ever.



    Your response is even funnier.

    ---
    ■ Synchronet ■ Vertrauen ■ Home of Synchronet ■ telnet://vert.synchro.net
  • From Siv@VERT/LHQ to Weedhopper on Wed Jun 29 00:10:46 2011
    Re: Re: How to hack a bank ~ SSL/
    By: Weedhopper to Siv on Tue Jun 28 2011 15:33:09

    Your response is even funnier.

    Hopefully for all the wrong reasons. :D


    ---
    ■ Synchronet ■ LEGiON HQ | 517 Reborn in 80x25 | SSH ONLY | bbs.legionhq.net
  • From Corey@VERT/TSGC to Weedhopper on Tue Jun 28 21:06:59 2011
    Re: Re: How to hack a bank ~ SSL/
    By: Weedhopper to Siv on Tue Jun 28 2011 03:33 pm

    Re: Re: How to hack a bank ~ SSL/
    By: Siv to Ree on Tue Jun 28 2011 08:10 am

    Re: Re: How to hack a bank ~ SSL/
    By: Ree to System on Tue Jun 28 2011 03:58:29

    and if your looking for the exploit in detail for educational purposes, it will probably be released soon, just keep googling "ho to hack a bank ~ SSL/HTTPS expliot (attack)

    I don't think I'll be holding my breath waiting for that...

    This made me giggle a lot. :D

    Because googling "how to hack a bank" is something I want
    in *my* search history. Nothing could possibly go wrong,
    and certainly nobody could ever misinterpret that as
    potential criminal activity. Not ever.



    Your response is even funnier.


    How do you hack a hacker?
    Do hackers get a hacking cough?

    "Practise safe Lunch, Use a Condiment"


    ---
    ■ Synchronet ■ Three Stooges Gentlemens Club - Las Vegas, Nv - tsgc.dyndns.org
  • From Dreamer@VERT/SETXBBS to Corey on Wed Jun 29 03:12:29 2011
    Re: Re: How to hack a bank ~ SSL/
    By: Corey to Weedhopper on Tue Jun 28 2011 05:06 pm

    How do you hack a hacker?

    You crack his box.


    ---
    ■ Synchronet ■ Southeast Texas BBS -- setxbbs.synchro.net
  • From Siv@VERT/LHQ to Corey on Thu Jun 30 20:08:23 2011
    Re: Re: How to hack a bank ~ SSL/
    By: Corey to Weedhopper on Tue Jun 28 2011 17:06:59

    How do you hack a hacker?

    No idea.

    Do hackers get a hacking cough?

    Everyone gets one if they smoke too much.


    ---
    ■ Synchronet ■ LEGiON HQ | 517 Reborn in 80x25 | SSH ONLY | bbs.legionhq.net
  • From Siv@VERT/LHQ to Dreamer on Thu Jun 30 20:08:54 2011
    Re: Re: How to hack a bank ~ SSL/
    By: Dreamer to Corey on Tue Jun 28 2011 23:12:29

    How do you hack a hacker?

    You crack his box.

    :O

    That's DIRTY!


    ---
    ■ Synchronet ■ LEGiON HQ | 517 Reborn in 80x25 | SSH ONLY | bbs.legionhq.net