Hacking the hackers -- opportunity / is it legal

[lordlimecat]

Recently received a phishing email that takes you to a site pretending to be Gmail account validation. Long story short, they dont validate input and I can see that SQL injection is possible. I have already contacted abuse contacts for both their host and the ISP (from whence the phishing email came-- cogenco).

Im wondering whether it is legal / in line with the HTS.org ToS to post the link here so that people may go to town and / or assist me in dropping the database so that noone's credentials are leaked, or alternatively flooding the database with so much junk that it is worthless.

Im most of the way there, but hitting some snags because of my limited mySQL syntax knowledge.

Please let me know, thanks!

[WallShadow]

is it legal? no

should you post the link? no, it would get edited out anyways

should you hack it anyways? depends, theoretically no one will notice if one of those phishing sites gets hacked, besides the hacker who made it. some hackers don't take to it lightly, and will retaliate. also remember that it is illegal, keep yourself hidden if you do it.

<3

[-Ninjex-]

Illegal, yes.
Against the TOS, yes.
If you post the information here, and are asking people to dump the database, odds are it will still end up getting leaked; maybe even more so.