Porn site hack

[DaMoNarch]

Porn sites seem to have super good security measures set up to prevent unauthorized access. Do any of y'all know of some vulnerabilities that can be exploited for sites like bangbros.com, brazzers.com or realitykings.com? They're most likely protected from the traditional SSI or SQL injections. I think maybe some kind of Javascript attack may be possible, but I'm not advanced enough to figure it out. Any help would be appreciated. I was just interested in practicing hacking into a strong secure site without incurring the attack of government or banking officials.

[fashizzlepop]

Please read our disclaimer, then come up with a better question. Also, I'd suggest looking through other threads in the Graveyard to see what we don't like around here and search through some other areas to see what we do.

Relevant: Reddit thread titled "Did I hack ggw?"[NSFW]

No more soliciting to hack specific websites or I will lock and kill the thread and warn you.

Edit: I'm not locking this immediately because it has the opportunity to become a reasonable, intelligent discussion but we do discourage illegal activities.

[centip3de]

Porn sites seem to have super good security measures set up to prevent unauthorized access. Do any of y'all know of some vulnerabilities that can be exploited for sites like bangbros.com, brazzers.com or realitykings.com? They're most likely protected from the traditional SSI or SQL injections. I think maybe some kind of Javascript attack may be possible, but I'm not advanced enough to figure it out. Any help would be appreciated. I was just interested in practicing hacking into a strong secure site without incurring the attack of government or banking officials.

You do realize that porn is a multi-million (if not billion) dollar a year industry, right? And that most of them are all run by the same companies, right? And that at least 80% of them out there use the same cookie-cutter website layout as any other, right? Ergo, they invest tons of money into security measures, so as to not lose profits. Furthermore, because most of them use the same layout, and are owned by the same companies, they're security measures span more than just one or two sites. We're talking probably upwards of 30% of all pornographic sites on the Internet. As such, I highly doubt someone who is inexperienced will be able to break in to one (then again, Sony did happen...). Besides, even if you do, you can guarantee legal action against yourself and all of your accomplices, should you have any. I'd suggest you start with something easier, such as either the missions, or one of the thousands of de-commissioned websites out there.

TL;DR: I doubt it'll happen. Start with something easier.

[fashizzlepop]

Actually, it probably is easier then c3nt suggests, but still not good for the inexperienced and definitely illegal.

[DaMoNarch]

Sorry. I rescind my original question. I just thought it'd be a fun hack but I don't want to bring the law down on me or anyone else. I've been doing the challenges. They are fun. I just wanted to see about applying what I've learned so far. So in the words of Gilda Radner "Never mind"

[fashizzlepop]

Check out the realistic missions. They are very goo.

[centip3de]

Actually, it probably is easier then c3nt suggests, but still not good for the inexperienced and definitely illegal.

It may, or may not be. Certain holes are definitely overlooked, and new ones are always created; however, (especially for a beginner) the odds are not in your favor.

[mShred]

It may, or may not be. Certain holes are definitely overlooked, and new ones are always created; however, (especially for a beginner) the odds are not in your favor.

You could really say this about hacking into anything, though.

[centip3de]

You could really say this about hacking into anything, though.

Not counting the missions, you definitely could -- to a degree. An industry that is estimated to be making an upwards of $10 billion a year is not going to take computer security lightly. Whereas, a brand new startup company (who doesn't have the knowledge, nor the money to hire a someone who does) might put computer security on the back-burner while they deal with other more pertinent problems. Granted the billion dollar industry can overlook a small SQLi somewhere, and the startup company could have the most intense security that's possible, the odds of that happening are extremely small. Although hacking anything in the real world with limited knowledge is damn near improbable (I'd probably place someones chance's of doing this around 10% (there's a lot of shitty web developer's out there)). Attempting to hack a site that pours hundreds of thousands of dollars into computer security dramatically lowers your chance (I'd estimate it to be probably about 1-3%), making it much, much harder.

TL;DR: No... but yes... but no.

[fashizzlepop]

Just because the industry is huge doesn't mean every site is going to be secure. Even the top sites probably have OK security and MOST sites will have sub par.