Hacking Facebook’s Corporate Network for Fun and Profit

http://stephensclafani.com/2012/07/31/hacking-facebooks-corporate-network-for-fun-and-profit/

by ssclafani • 14 years ago

38 7 14 years ago

cluda01• 14 years ago

Why don't more companies do this? It seems like a good way to outsource your penetration testing at bargain basement prices.

edit: Well, I would say in concert with your own internal penetration test, not replace

kayman• 14 years ago

It requires a new way of thinking. Crowd sourcing your security and giving an incentive for the person to report the security hole.

GFKjunior• 14 years ago

Here is German? site that does crowd-sourced pen-testing. I have no first hand experience but most testers seem to be from eastern europe.

https://www.hatforce.com/

darien• 14 years ago

Sounds like this guy had bad timing - http://www.pcworld.com/businesscenter/article/229396/uk_man_...

pavel_lishin• 14 years ago

I wonder what the deadline is. How much time can pass between me finding a vulnerability and me reporting it before I'm labeled an evil black-hat, instead of a bug-reporting penetration tester?

tectonic• 14 years ago

That's a pretty serious hole indeed. Good find!

Is the title a reference to http://blog.andrewcantino.com/blog/2011/12/14/hacking-google... or a coincidence?

ssclafani• 14 years ago

Thanks. Both titles are references to the paper Smashing The Stack For Fun And Profit by Aleph One. http://insecure.org/stf/smashstack.html

Hacking Facebook’s Corporate Network for Fun and Profit

Related Stories