Anyone give tips?

So, I need tips.

I'm currently using firewalk, scanrand, nmap, and w3af to audit a website, but have turned up empty handed. I believe that this website has a government-grade security penetration test done against it every year or three. It has more than a hundred thousand users. It is well secured, but not THAT well secured.

Can anyone give me tips on finding anything remotely vulnerable on the target website? I can give a list of almost every single utility they use on their webservers, from Apache to their search bar version.

I just want post count.
And to warn you that's a scary tree to take down.

Post count~

GUYS DO YOU KNOW ABOUT SECURITY EXPLOITS IN SOFTWARE THAT NOT EVEN THE MULTI-MILLION DOLLAR CORPORATIONS KNOW ABOUT THEIR OWN SOFTWARE THAT THEY DEVELOPED FROM THE GROUND UP?

plzthnx

GAMEchief wrote:

GUYS DO YOU KNOW ABOUT SECURITY EXPLOITS IN SOFTWARE THAT NOT EVEN THE MULTI-MILLION DOLLAR CORPORATIONS KNOW ABOUT THEIR OWN SOFTWARE THAT THEY DEVELOPED FROM THE GROUND UP?

plzthnx

Because his question is completely out of the realm of possibility.

Happens all the time actually (a la Microsoft).

I bet you've never even developed extensive software from the ground up, lol. If you did, I wager that it'd be riddled with bugs and flaws.

My specialty in web programming was actually security. People paid me to debug their software, or design it from the ground up without flaws. RE: exploited every single extension LG was using, lulolulolulolulol

It's not out of the realm of possibility, but the fuck are we supposed to tell him?

"Hey guys, I'm trying to exploit some high-profile software. Tips?"

Examples of appropriate replies:
There fucking aren't any, because it's a stupid question.

GAMEchief wrote:

Examples of appropriate replies:
There fucking aren't any, because it's a stupid question.

Add lrn2prgm to that list.

I don't think programming will help me here.

Anyway, off to look somewhere else.

Flareboy323 wrote:

I don't think programming will help me here.

Anyway, off to look somewhere else.

You'd be surprise at how much programming could help you actually. In many different ways.

so know u a video game designer and a pro exploiter. damn what next a space cowboy?

2pac wrote:

so know u a video game designer and a pro exploiter. damn what next a space cowboy?

lelelelelel

2pac wrote:

so know u a video game designer and a pro exploiter. damn what next a space cowboy?

Me? I'm not a game designer. My entire problem with my game engine is that I can't do graphics for shit. I'm a programmer, and I used programming to make the engine. I didn't make a single graphic or soundbit in it, unfortunately.

Exploiting comes with the trade of programming, which I imagine is what Unintjerkable is talking about. I learned about security flaws through programming.

You can't plan a prison break if you've never been inside a prison. You can't exploit software if you've never designed software.

GAMEchief wrote:

Me? I'm not a game designer. My entire problem with my game engine is that I can't do graphics for shit. I'm a programmer, and I used programming to make the engine. I didn't make a single graphic or soundbit in it, unfortunately.

Exploiting comes with the trade of programming, which I imagine is what Unintjerkable is talking about. I learned about security flaws through programming.

You can't plan a prison break if you've never been inside a prison. You can't exploit software if you've never designed software.

He's talking about Flare, not you.

Sheesh, paranoid.

Also well put analogy. Surprisingly.

I didn't know Flare was a game designer.

Obvious sarcasm is obvious.

I'm not a game designer, I was working on a game engine in C++. Like you, though, I can't do graphics for the shit of me. I've been trying to find a free open-source graphics engine, but so far I can't find anything good.

But anyways, does anyone here THINK they can help? I can send you all of my compiled information if so.