[MoNkEySdAnCiNiNg]

So i decided an hour ago to quickly take a look at fedz.rip - a biolink page from .cz forum

What i already found within just 3 minutes of looking at their claimed "End-2-End-Encrypted" messaging system, we simply discover that the private key of BOTH parts simply gets returned in the API response (Meaning they hold private keys in plaintext)

And after that we found SEVERAL critical vulnerabilities leading to us dumping their database, and come to find out, OBVIOUSLY they hold all users passwords in plaintext... what a surprise. I also dumped their admin chat including that.

This is just simply a Proof of Concept that the average user of .cz does not have any technical capabilities at all, they are completely clueless idiots. This is the least secured website i have EVER seen. This is worse then a beginner CTF.

https://pomf2.lain.la/f/ssb4o50f.jpg - PoC image

https://qu.ax/x/LZxrb.png - developers .cz post

https://qu.ax/x/I9SOK.png - developers .cz profile

"This is worse then a beginner CTF "  XD

[Yundal08]

thanks for sharing this lol

[snowbunny]

lms whats in here

[test7870]

Let me take a look at this interesting information you shared.

[pedro1122]

Good work brother

[losthero]

thanks for sharing this ,good job!

[Psych1c]

Well done, cheering for you <3

[Jerry873sx]

Thank you for sharing, let me take a look.

[Hoover]

nice one thnaks dude

[hellohelloworld]

thank you for your sharing