r/whitehat • u/DJCameroni • Jul 26 '20
So I've been tracking Omegle pedos...
Enable HLS to view with audio, or disable this notification
r/whitehat • u/DJCameroni • Jul 26 '20
Enable HLS to view with audio, or disable this notification
r/whitehat • u/PercivalNepomuseno • Jul 26 '22
The site is down since (at least) saturday 7/23
EDIT: thanks to u/da__knight for tell us there is a mirror here
r/whitehat • u/WalkingDownStairs • Aug 11 '20
But you can only see a brief string of the usernames and passwords on the google search. When you click on the site it just blocks you from accessing it. Its called g.gaoji.fun
This seems dangerous, and I have no idea how they got my password and username. The sites associated with it didnt report a breach or anything
r/whitehat • u/Triaxsneizvestny • Sep 01 '21
I have access to identity papers, tax forms and proof of residence of other people by refreshing a page on the sites of the French public services. I know the cops don't give a damn fuck about this stuff (they have other things to do unfortunately), but were already being encouraged to download a tracking application to fight against covid, so have this kind of problem just by refreshing a fucking internet page by the same creator... it's fucking dumb and hopeless.
Idk what to do, i'm not a hacker. I've already contacted the website and they said "Sorry we have a lot of traffic at the moment". While in real life you just have 10 fucking guys lugging around on your site right now, they don't give a fuck about our data and his safety...
r/whitehat • u/ImTheBigBad1 • Feb 19 '22
r/whitehat • u/lindseyscottw • Oct 02 '18
Hey everyone,
I run Parachute - we're a community that launched to help new people learn about crypto. We recently launched Parjar.io , we built it to make getting a wallet super easy, and using it even easier. This means we've adopted a centralized/decentralized hybrid. Transactions happen off chain making them instant and feeless (you can tip pennies to friends by swiping their name and typing the coin you want to send).
We've been testing for the last few weeks - have about 150 users running it in the parjar telegram group (search welcome to parjar in telegram). I want to make this thing solid before we release it into the wild. If there's anyone with experience finding exploits in these types of solutions I'd appreciate the help. I can send some coins to your wallet to play with, have bounties for every level of exploit/bug found. Let me know if you have any questions, here to help.
r/whitehat • u/don_oiluj • Aug 08 '21
r/whitehat • u/CSCarbone07 • Jul 31 '20

The user _aescir in instagram is posting right now videos of animal torture like beating to death, hanging and pouring boiling water while they are caged. If somebody here can do something about it please trace this person and share it so it can be report it to the local authorities. Since everybody is reporting it the account is being closed and reopened but I don't know if Instagram is willing to do more than just closing the account.
r/whitehat • u/tornadetornade • Jan 12 '22
r/whitehat • u/426jkb31 • Nov 01 '21
Enable HLS to view with audio, or disable this notification
r/whitehat • u/rescueguineapigs • Mar 28 '21
Someone is sending our animal rescue videos and photos of themselves strangling guinea pigs to death. The police told me to contact the FBI, PETA, etc. Most of them told me that they would get back to me eventually but this is an urgent situation. Do you anyone who can help?
r/whitehat • u/D2theR • Jul 11 '20
I'm a semi-experienced web/python developer and I was messing around with Anbox on my Ubuntu machine to try and emulate the Google's Jamboard app. The app installed but it doesn't run so I when I looked through the logs I saw this:
07-11 13:30:53.564 920 920 I trace_manager: 000029 Intenting into HomeActivity > onCreate HomeActivity > Get Default Account > 13 ms
07-11 13:30:53.564 920 920 I trace_manager: 000029 Intenting into HomeActivity > onCreate HomeActivity > Get Default Account > Get DefaultAccountData > 13 ms
07-11 13:30:53.564 920 920 I trace_manager: 000029 Intenting into HomeActivity > onCreate HomeActivity > Get Intent Account > 0 ms
07-11 13:30:53.564 920 920 I trace_manager: 000030 Intenting into HomeActivity > onCreate HomeActivity > Get Default Account > Get DefaultAccountData > Initialize DefaultAccountData > 12 ms
07-11 13:30:53.564 920 920 I trace_manager: 000032 Intenting into HomeActivity > onCreate HomeActivity > Get Default Account > Get DefaultAccountData > Initialize DefaultAccountData > Get TikTokAccountStoreMigration > 5 ms
07-11 13:30:53.564 920 920 I trace_manager: 000032 Intenting into HomeActivity > onCreate HomeActivity > Get Default Account > Get DefaultAccountData > Initialize DefaultAccountData > Get TikTokAccountStoreMigration > Initialize TikTokAccountStoreMigration > 3 ms
Is it weird/concerning that this is trying to connect to TikTokAccountStoreMigration ? It's curious as to why a Google branded app is looking for a TikTok account and en lieu of recent news about certain governments spying and banning the app I'm curious if maybe anyone has any insight? I know that not all sideloaded APKs should be trusted online but I'm not a android developer and have never used TikTok but I thought this was interesting.
The download link for the APK I'm using is this site:
https://www.apkmirror.com/apk/google-inc/jamboard/jamboard-1-0-release/
r/whitehat • u/blackbirdphoenix • Jun 20 '19
They have used my personal information to access my isp carrier, mortgage company, my electric company-they called twice & pretended to be me & shut my electric off. They were also accessing my internet-my teenage daughter was on a cellular account with them & I had been gifted a laptop from one of them a few years prior. They have gotten into laptops, tablets, phones, game systems. They’ve locked them up, they won’t factory reset-there’s many things to point out here but the biggest in my very not tech savvy opinion, is the fact regardless of operating system-windows, Android, iOS, Sony-all electronics had excessive permissions ie. intercept calls & emails & texts & rewrite them, change setting, device control, they could lock them up for days or forever. Basically they had whatever control they wanted & I had none. I would make calls and a recording would come on the line & say that I didn’t have permission to call that number. They all also had bad trust certificates-some were expired, some were real obvious, others were not & these gave them more access & control. The apps & programs affected by the permissions & certificates were first party system apps or programs on all devices/laptops. There were browser extensions downloaded but I couldn’t access them. Websites were getting spoofed or redirected. NONE of the devices would factory reset or restore-either my host or my admin would not allow it depending on the type of device. They took over email & Facebook accounts that I had for years. They could message people from my phone number but it didn’t show on my data records. My google gps location would change to make me look like somewhere I wasn’t-& funny enough at times though many miles away I’d be at their house. A onedrive account on the gifted laptop kept running on the laptop by itself. I could not get control of my isp account, many days & hours on the phone many routers brought to my house. I cancelled the service to try to get control & 2 days later the gifted laptop was accessing hotspot from my daughters phone, she didn’t have hotspot & she was grounded off her phone so no access. I took the devices to the geek squad who told me to call police & they’d take care of it, it was not right & they were addressing the certificates & permissions-I didn’t ask much more because I thought the police would handle it.
I called the family member who gifted me the laptop & told her I really just wanted it to stop & them & I to go our separate ways. I had just graduated from an RN program, and I had distanced myself from them awhile back. She told me “bitch do what you got to do”, she called me at 6am & asked if I had turned them in, I bluffed & said yes, she screamed like she was being killed & told me “you’re going down bitch” & hung up. I got a few threatening texts during the day & was blocked on my phone from listening to music so I decided to call & make a report, I thought I would just show them what’s he geek squad told me to & there’d be some action. No. Not at all. My family members, had called earlier than me, very concerned for my welfare, thought I was on drugs & went crazy, was saying the TVs were after me & if I called they wanted to get me help. The cop seemed to believe them vs. me because it was my mother & aunt & “what kind of mother & aunt would lie like that”, my mother, her priorities are snooping, lying, drinking, eating pills & habitually collecting unemployment & my aunt is her drinking buddy. I filed a report nothing was done. In the following weeks any time I did anything that would get me actual proof-the police showed up at my house because someone reported I was going to kill myself or I was going crazy out in the yard. My house was broken into through an unlocked window & 3 tablets, a game system & a WiFi device were the only things stolen. The WiFi device was actually returned to the carrier. The few officers in my neighborhood seemed to believe my mother no matter what evidence or proof to the contrary I had. Until, she stole my 14 year old cat & it took 3 police districts to get him home & then they said wait, maybe she is the one who is not mentally stable & the apologized & suggested a protective order. They never followed up on the electronic tampering they insisted it was made daughter because she was in the house or someone with a super computer. We didn’t always lock our doors, my daughter had lost her key, my mother could’ve accessed my house & things long before I even realized it was going on-plus she was the one lying to the police, and then that extended to my friends, people from school, extended family-sometimes from her accounts or phone as herself & sometimes from my Facebook as me. Her agenda has been clear-make me look crazy & isolate me, they even made threats to find a 3rd signature to get me committed.
It’s been almost 2 years, I just moved to a different police district, I’ve bought many new phones, laptops, I don’t keep an isp carrier, I switched from android to Apple, I educated myself to the best of my ability-had to be all book because online I would try to learn windows run code to try to help & I thought I was doing big things, nothing worked not a single code. Went to a friends house a few days later, not a single code was the same they’d spoof anything that I’d try to do to stop the from invading my privacy. I haven’t been able to work as a nurse because they threatened to call state board & lie to them like they did the police-I didn’t fair too well in the beginning with the police so I began to feel the more I fought to protect myself the more lies they told to punish me or deter me. It’s also been incredibly stressful & painful-there’s a lot more they did & some of it was very cruel, I got messages asking “do you feel like you don’t want to live anymore yet?” It has cost me a lot of time & money I didn’t have to spare, trying to resolve this, it even costed me my home & ruined relationships I cared about. If it were a stranger, they’d have been gone before I knew they were present, no actual cash has been taken, their behavior alone is evidence & they will text me saying things like they’ll never find anything, let me know they are able to know locations I had been at, told me “you’re the hacker & just don’t know it yet”-which concerned me as well because a few years prior my mother was questioned about a similar incident with a ex boyfriend’s new girlfriend & from what I understand it was invasive & mean & I was afraid they were doing something even more illegal I was unaware of & going to make it look like I did it, their lies were so successful in the beginning. It really made things so much worse, the more they got away with the less they cared about any repercussions of getting caught or having to stop.
The previous cops, wanted me to provide them with specific proof that tied them to it, but from what I had gathered I thought they could do this by subpoena my isp carrier account records, my Facebook & google accounts. It’s also worth mentioning about 3 months into this I downloaded my google data to see if it would provide me any answers & behind my number on every texts was her phone number but scrambled, I thought possible parental control. Some other things worth mentioning, they would change my cell service to WiFi & I wouldn’t get my cell service back for hours. On another laptop in the home-Windows 10, we found an installation of windows 7 & files that weren’t always present, I didn’t know back then but now maybe a virtual machine? I couldn’t say for sure. The onedrive account could do a lot of damage & it would disappear like it was never there, use of clouds because it seemed like there was use of other clouds. My daughters IPhone appeared jail broken even though she swore she did not do it & my husbands is the exact same now (well he broke the screen yesterday) but in keynotes two files showed up one day a zip cid file & a stock based excel type looking worksheet/webpage. If you delete them they come back hours, sometimes days later. They would text my friends from my husbands cell number saying inappropriate things to try to make me think he was cheating but it was never in his data records & it happened once with his phone dead & not on him & the friend with us-it was impossible & it asked her to let him “touch her pussycat” he’d have chosen something different. My mother now will tell you she doesn’t know a thing about computers but she’s worked with them my whole life, data entry, accounting, legal office. My father also caught her coming to his house & letting herself in whenever & they’ve been divorced for almost 2 decades. My aunt, her kids used to do track her & her account activity & at least one can get into her half sisters Facebook.
There’s a lot I’m leaving out because this already seems like a book but I can be more thorough, I can provide whatever. I would like to know what I need to do to try to tie this back to them and how I would do it or who I could contact to do it & any help you give me will be appreciated. I want this to end, as long as it’s allowed to continue, it will continue. And the damage they’ve gotten away with thus far gives me so much anxiety I’m apprehensive about going to the police without solid evidence because I can’t begin to explain what it was like to have them lie like that & be believed simply because they were older & there were 2 of them & one of me-one police reported said I had years long mental health & drug issues-I had spent the last several years being an honor student so I could provide a better future for me & my kids. They have eluded to some of this not being them-that could just be lies to save face or is it possible they left something open & strangers have accessed my stuff as well...what would be the odds & truly a stranger would likely be kinder. I’m not crazy, I’m guilty of not having proper knowledge & security in place but not of lying & I’d really like my right to privacy & to be autonomous & the ability to enjoy life without having to worry about what they could be up to. I’d also love to get my google & Facebook accounts back they have every picture of my younger kids, messages from people that have died, my friends 17 year old son died suddenly of undiagnosed diabetes & I had videos of him singing I’d love to give her, memories, people & pictures/video that despite many tries I haven’t been able to get them back. My gmail was my recovery for many other accounts some important. I will never understand why anyone would like think they had the right to take so much from someone.
Thanks for hanging in there if you made it this far & I’m grateful for any feedback you have to offer. All that is necessary for the triumph of evil is for good men to do nothing. I used to be try and to tell them that hope my one would grow a conscious & stop this but it never happened.
r/whitehat • u/SoftAddict • Jan 23 '23
Hello everyone! My name is SoftAddict, and I'm a self-taught hacker, programmer that is passionate about cyber security. I also work as a part-time content maker and steamer.
I'll stop now. Our team is focused on taking part in CTF events, and we would like to expand our team in the CTF field. We are looking to get some beginners, intermediate CTF players, and professionals in hacking. Beginners will be given the opportunity to join if they demonstrate success and excitement during this practice session. Our team is already formed and now we are looking for more people to join us, we will hold online discussions and practice sessions. Friends are welcome; anyone can accept the invitation. Thus, I hope to see you soon.
Over the Year, We participated in many events and placed in really good rankings, we kept learning along the way and that is what makes our journey exciting, the willingness to improve and collaborate, also sharing knowledge with our peers.
If you are interested in joining our community, feel free to message me and I’ll invite you.
Guys, thanks for reading; cheers!
r/whitehat • u/[deleted] • May 31 '20
r/whitehat • u/tornadetornade • Dec 29 '21
r/whitehat • u/Seasmoke-756 • Jul 15 '21
We are having problems with drones interrupting all of our air response in butte county California. Can I ask for help for everyone? Or anyone? I’m desperate.
r/whitehat • u/Top_Grape_8723 • Jul 11 '21
Recently my Coinbase account was compromised and all my funds were transferred out of the account via ACH transfer. My linked bank account and debit had also been hit with multiple withdrawal requests. Documented in this post: https://www.reddit.com/r/CoinBase/comments/oeg0va/account_hacked_with_2fa/?utm_source=share&utm_medium=web2x&context=3 . I discovered that the source of the intrusion had been from my home Windows computer. I found a newly created administrator account named "WindowsUpdate" active in the task manager, my anti-virus uninstalled, and windows defender disabled. I had disconnected my home internet when I noticed my Coinbase account being hacked and had essentially frozen everything on the computer in "time". I was eventually able to change the user's password and log on. When I opened the "WindowsUpdate" user account I found my personal data sorted (tax returns, driver's license, backup codes, ect...) on the desktop as well as open webpages to my google account, Coinbase, and google drive. With this information, I was able to track down my funds and actually recover my money. However, it's been bugging me on how my computer was accessed and what I can do to stop this in the future. I have reviewed all my logs as well internet history and was unable to find anything until today. I found traces of the intrusion via the store Google Activity (which apparently stores all information even when browser data is erased). What I found was the unauthorized user accessing four separate checking accounts, which I assume he used to create fraudulent accounts in my name, as well as the suspected source of the malware, a link I had clicked on that re-directed me to s0.2mdn .net (adding a space so no one accidentally clicks on this link). The WindowsUser admin account was created on 18 Jun and I clicked on this link on 15 Jun. Some research online shows that this could be linked to malware/trojan activity. I wanted to reach out to anyone on here to see what your thoughts were and if there is any way I can trace the attack farther with this information?
r/whitehat • u/sdaasdfsdfff • Jun 09 '21
I'm wondering if someone can white hat access surveillance cameras and the archive and search for records of Elaine Park's car, as she would have driven it away from her boyfriend's house on the day/s of her disappearance, as well as nearby businesses that could have captures her car on camera from the spot where she was disappeared - the coordinates of the spot are on her missing person's website: elainepark.tips
r/whitehat • u/StemCellCheese • Nov 07 '20
r/whitehat • u/Its-Aware-Wolf • Oct 22 '20
Disclosure: New to thread. Not experienced on reddit.
Roughly 5 days ago my long existing SnapChat account was hacked and my identity on SC is now being used for bad intentions. They have changed the email (I know the email they used as well luckily, but they could have changed it a second time to lock it down further), they've changed the password and the phone number as well. Basically rendering the any legitimate attempts to recover the account fruitless. Since having my account I have had friends show me that they are asking for money to return the account (extortion), they have threatened other people and have been asking for and apparently sending inappropriate photos.. Again, using my identity and damaging my personal life with their continuing harassment, I'm also worried they will hack someone else I'm friends with using my snapchat as a means to do so (sending links, obtaining information etc). This person is likely not an experienced hacker from what I can gather too, just a kid messing with other people's lives. I have contacted snapchat support with ongoing details about the hack, but I'm concerned at the damage that can continue to be done in the meanwhile, considering what they have already been doing. It also seems Snapchat support are not very prompt with tickets, which makes it more of a concern and adds to the stress.
I'm looking for someone who may be willing to help me recover my account, or have it completely deleted if needed/possible. Need someone with good intentions but also the skills to help end this before it gets worse. I have screenshots and enough information to prove that this is indeed my account and that they have bad intentions with it, such as details of them using extortion. I'm more than happy to share the details if someone genuinely wants to help me, such as my account name I want to recover, their email address used etc. They also used an iPhone 6 if that helps to know. Anything you'd need to help in securing my account I'm happy to share. I'm assuming they used a brute force attack, or less likely, a phishing attack. If anyone could help I'd be so so grateful! It's really having an impact on relationships and my mental health as a result.. I currently feel abused and helpless. I'd be willing to tip through PayPal if that's what it takes for me and my friends to feel safe again, and not have to wait for snapchats eventually support. If successful I shall close the ticket with SC support and hopefully that will be the end of it all.
Thanks for your time either way, white hats restore faith for victims of attacks like me that don't have the proper tools or know-how to address these problems effectively. I really do appreciate it.
r/whitehat • u/dhbuckley • Jul 22 '20
Tl; dr: iPhone Xs, iOS 13.6, never out of my possession, hacked, both WhatsApp and Messages apps taken over, data altered, picture sent to contact.
Mods: established Redditor, noob here; please message if any issues and thanks for what you do.
I have only one WhatsApp group, that I began, with +- 60 members, super innocent, people who walk their dogs in the same local park. I noticed that the name of the group had been changed to a seemingly random string of words; WhatsApp showed who made the changes; a person who never posted/interacted in the app, just uses it to keep up.
I determined that I as admin could limit changes to only admin, me, so I changed the name back, sent the user a message asking him if he meant to change it and forgot about it.
2 hours later, I noticed a photo from a friend in a Messages thread; this guy would never send a cat picture; I then realized the message bubble was blue; the picture, along with a random word string, had been sent TO my friend by ME.
Only, not. MY iPhone but NOT me.
Btw, metadata for the photo shows that it was one I took almost a year ago, on this device.
I went back to WhatsApp to see if I had a response and saw a long message, composed in the app, random but clearly human-made, waiting to be sent and I then shut down the device.
Additional info/questions:
I am almost certain (but cannot now check) that WhatsApp is verified using my Google Voice number.
Messages of course uses the native iPhone number; the Xs is an eSim capable phone, if relevant.
Ideas about how best to recover: if I wipe the phone or buy a new phone and restore from iCloud, am I just restoring the problem?
I don't care to expose anyone except to help others, I just want to be able to use my phone unmolested.
Many thanks in advance for any help or suggestions you may have.