id,email,first_name,middle_name,last_name,dob,address_formatted,address_street,address_suburb,address_state,address_postcode,address_country,encrypted_password,*****_one_uuid,is_admin,is_super,user_status,kyc_tier,mfa_enabled,last_login,trade_volume,completed_transactions,referral_code,account_type,edd_failed,pro_trader,inserted_at

Looking for peoples that can work out big USA targets, only % not looking to sell @half

Selling CORS exploit chains, basically full account takeover with just 1 click from the victim, @half for info

How the attack/exploit chain works :

Victim is logged into target site in one tab.
Victim opens eviltarget.com in another tab (clicks a link in email, Telegram, an ad).
JavaScript on eviltarget.com says: "Hey browser, please ask target.com for the victim's data, and send the victim's cookies with the request."
Browser sends the request, with cookies.
Server answers "yes, eviltarget.com can read this."
Browser gives the answer to the JavaScript.
JavaScript sends the stolen data to the attacker's server.

I have various vulns ready for sale @half

Looking for USA callers rn for FA's @half

need vm

Anyone has fresh zenledger database ? Have exploit that can drain entire user balance with the use of XUMM , requests originate from ZenLedger and drains user out ( USDC tested, also wrapped btc ) @half

Basically you SE the ZenLedger victim into declaring their XRP

You go on the program , insert the victim address and you'll get a custom payload to send him

You send them the link -) cahsed :)

Obv every coin under XRP network is cashable, so wrapped btcs etcetc

Anyone working USA rn ? FA's @half

Selling exploit on a big financial site (800M revenue ) , various exploits :

- Mass denial-of-banking — victims can't deposit, withdraw, or auto-invest. Deposits in flight may bounce. Purely
destructive.
- Attacker can reroute a victim's recurring transfers (e.g., redirect a scheduled payment's source/destination) to
accounts they control.
- Straight loan-proceeds theft. A victim's approved personal loan pays out to an attacker's linked account.
- Hijack automated cash movement — redirect sweeps, drain idle cash into attacker accounts, or disable protective
sweeps before other attacks.
- full KYC bypass

and more


price : 2M$

@half MM accepted as always :)

Accepting full audits on your targets, $xxx.xxx+ @half

Im back :)

anyone has expirence with ransoms ? @half ( not ransomware, company ransoms )