[Jaoomo]

thank you for share

[probe]

lol,it looks hilarious.Very interesting

[c0mmandor]

thankx for sharing

[marzook]

So i decided an hour ago to quickly take a look at fedz.rip - a biolink page from .cz forum

What i already found within just 3 minutes of looking at their claimed "End-2-End-Encrypted" messaging system, we simply discover that the private key of BOTH parts simply gets returned in the API response (Meaning they hold private keys in plaintext)

And after that we found SEVERAL critical vulnerabilities leading to us dumping their database, and come to find out, OBVIOUSLY they hold all users passwords in plaintext... what a surprise. I also dumped their admin chat including that.

This is just simply a Proof of Concept that the average user of .cz does not have any technical capabilities at all, they are completely clueless idiots. This is the least secured website i have EVER seen. This is worse then a beginner CTF.

https://pomf2.lain.la/f/ssb4o50f.jpg - PoC image

https://qu.ax/x/LZxrb.png - developers .cz post

https://qu.ax/x/I9SOK.png - developers .cz profile

the end times are near lol

[greaxo]

this is way too good

[dtasfar]

looks cool ty for plaintest data seet