Plateforme de Hacking

HackBBS.org est une communauté faisant évoluer un système de services vulnérables.

Nous apprenons à exploiter de manière collaborative des solutions permettant de détourner les systèmes d'informations.
Cet apprentissage nous permet d'améliorer les technologies que nous utilisons et/ou de mieux comprendre l'ingénierie social.

Nous défendons les valeurs de l'entraide, du challenge personnel et contribuons modestement à rendre l'expérience des utilisateurs finaux la plus agréable possible.

Vous pouvez nous rencontrer via notre salon irc.
Le forum est en cours de remplacement par une version plus moderne, et tout aussi faillible que l'ancien ^^.
A ce jours nous enregistrons plusieurs dizaines de hack réussi contre notre site, et ce chiffre est en constante évolution. Merci a tous les contributeurs!

La refonte est en version alpha. Cette nouvelle plateforme permet de pentester à distance sans avoir son matériel à disposition.
Via l'exécution de scripts python connecté en websocket à l'ihm web, nous pouvons piloter le chargement de scénario
d'attaque/défense en "multijoueur" ^^.
Le système permet de charger des scripts de bibliothèques partagées et de chiffrer les échanges selon les modules déployés.
Vous trouverez dans la rubrique article de nombreux tutoriels afin de mieux comprendre la sécurité informatique,
ainsi que différents articles plus poussés.
  • Sniffing
  • Cracking
  • Buffer overflow
  • Créations d'exploits
  • Social engineering
  • L'anonymat sur le web, spoofing
  • Bypass-proxy, Bypass-firewall
  • Injection de code SSI, SQL, etc...
  • Utilisation d'exploits, création de scripts(php, irc, perl)
Nous vous recommandons de sniffer votre réseau lors de votre navigation sur le site. La refonte vous fournira un outillage pour réaliser vos attaques/défenses.
Flux RSS

flux RSS d'HackBBS Abonnez-vous. Soyez prévenu des tournois, challenges, actualités, ...
Recevez nos dernières actualités sur notre flux RSS.

Vous pourrez également participer à de nombreux challenges en constant renouvellement (si possible :p)
Dernièrement, les missions relativent aux derniers produits open sources marchent bien :)

Votre ultime challenge sera de défacer HackBBS. De nombreuses failles sont présentes. A vous de les trouver et de les exploiter.

Cet ultime test permettra de constater votre réactions face à une faille.
Black ou White? ^^

Ezine du moment: p38-15.txt
                                ==Phrack Inc.==

                 Volume Four, Issue Thirty-Eight, File 15 of 15

              PWN                                             PWN
              PWN              Phrack World News              PWN
              PWN                                             PWN
              PWN     Issue XXXVIII / Part Three of Three     PWN
              PWN                                             PWN
              PWN        Compiled by Dispater & Friends       PWN
              PWN                                             PWN
              PWN     Special Thanks to Datastream Cowboy     PWN
              PWN                                             PWN


and delivering what might have been their messages.


to speak here myself.  Too bad!

maintain a broad universality of taste.  Whereas you're apparently willing to
tolerate science fiction writers, but already certain members of the computer
any kind of creditability!

court jesters, science fiction writers are sometimes allowed to speak certain

and diskette copying devices, the US copyright laws are irrelevant.

Often intercepted by laughter and applause, Sterling received a standing
ovation at the conclusion of the speech.  Computer Press Association newsletter
editor Barbara McMullen was overhead telling Sterling that he had replaced
described the speech as "incredible and tremendous".

have to get Sergei.  I'm going back to fiction."



affordable to the Phrack readers.

     $19.95 + $4 (shipping and handling)

     Call now:  (800)235-4922
                CFP Video Library Project
                P.O. Box 912
                Topanga, CA  90290


 By Barbara E. McMullen (Newsbytes)

an investigation by federal agents into allegations of computer intrusion and
criminal activity.

computer criminals; Newsbytes New York Bureau Chief John McMullen as a
magistrate responsible for considering the investigators' request for a search

Foundation in-house counsel, and Alameda County Assistant District Attorney
Donald Ingraham.

at Georgetown University; Glenn Tenney, California Congressional candidate and
controversial case involving the electronic publishing of a stolen document;
"Phiber Optik."

as overreaction by the law enforcement community, Neidorf discussed the case
computer equipment and his 1991 arrest by Delaney.

charges by the US Attorney's office.

participate, admonished Phiber and other hackers to use their demonstrated
talents constructively and to complete an education that will prepare them for

hackers and makes the problem worse."


 Computer Revenge A Growing Threat                                March 9, 1992
 By Tom Steinert-Threlkeld (Dallas Morning News)
 Article in the Chicago Tribune, Page C3




It's an invisible epidemic that corporations don't like to talk about while
they're trying to convince banks and creditors they are becoming more efficient


The downsizing has led to inadequate attention to security precautions, argues
and more responsibility for information systems.

deserves scrutiny, he says.

VTOC, for example.

Andersen client was paralyzed recently when a VTOC in its information system
was scrambled by a downsizing victim, Ellis said.

devastate a computer installation by destroying the VTOC, without ever touching
the programs and data," he said.


They also are appropriating information from magnetic memories and selling it
at hefty prices in the burgeoning field known euphemistically as "commercial
business intelligence," said Sherizen.

publicly embarrassed, the security experts say.


fairly those who are staying.

>from employees who finally conclude that their contributions are going
unrecognized, said Murray.

sabotage, he said.

 Computer Crime Problem Highlighted                               March 9, 1992
 By Oscar Rojo (Toronto Star)(Page B3)


"Electronic intrusion is probably the most serious threat to companies that
Allpoints publication.

Allpoints cited a study of 900 businesses and law enforcement agencies in
computer crime.

deliberately and maliciously try to disrupt business and government systems,

perpetrated by an outsider.

Intercon said the technology exists to guard against most electronic

 Criminals Move Into Cyberspace                                   April 3, 1992
 By Mick Hurrell (The Times)(Features Section)

The hacker and the virus programmer embodied the popular notion of computer
computer technology.

viruses such as Friday 13th or Michelangelo.

extortion, conspiracy and ransom collection.

Against this disturbing background, Donn Parker, SRII's senior international
security consultant, is telling businesses they will be under increasing attack
>from sophisticated criminals using computer technology and from others intent
on causing disruption.

anticipate future types of crime in our security efforts before they become
serious problems."

electronic mail terrorism, fax graffiti attacks, electronic data interchange
fraud, and placement of unauthorized equipment in networks.

As digital imaging can alter video images seamlessly, the possibilities for
sophisticated fraud are numerous.

computers could be more valuable than the hardware itself.

being used for extortion."

Desktop forgery is another crime that looks certain to boom and plague
comfortable offices or their own homes and produce more accurate fakes than
ever before.

altered before being printed out.  Business documents such as purchase orders

something that could flourish."

big security issues are going to involve networks and the connection of
with Coopers & Lybrand Deloitte, the consultants.

the desire for system flexibility and the constraint necessarily imposed by
accept the risk up to a point."

Networks are attractive because they allow information to be easily transferred
within an organization that can extend across countries and continents.  Making
them secure against interference from both outside and within is difficult.

worldwide network of data communications.


of conflicting security efforts.  Consistent security practices should be
applied uniformly as well as globally.

"When organizations in different countries with different national laws,
different ways of valuing information assets, and different national ethical
customs, use equipment from different manufacturers in their networks, they

Some computer security consultants believe that network security headaches will
longer offer appropriate forms of security.

Professor Roger Needham, of the University of Cambridge computing laboratory,
to become second nature."

sophisticated detection system, designed to identify criminal users as they
commit their crime.

inform the company's security division if it identifies any significant



"transparent" to the user.

potential gains will be greater."

 PWN QuickNotes
   new computer network that will link law enforcement professionals
   nationwide.  The network uses advanced computer capabilities to foster and
   empower IACP's belief that strength through cooperation is the key to the
   success of law enforcement endeavors.

   Communications services will be the interaction focus.  An electronic mail
   feature allows private messaging among IACP NET members.  Exchange of ideas
   will be encouraged and facilitated through electronic bulletin boards on
   general subject areas and computer conferencing on specific topics.
   Anchoring the communications service is the Quest-Response Service, a
   service created and proven successful by LOGIN that allows members to post
   and respond to requests for information in a formatted and accessible

   1,000 Colorado ATM users had their Visas and Mastercards abruptly terminated
   in February by an out-of-control computer system.

   For 90 minutes during the President's Day weekend, the Rocky Mountain
   unnoticed because it occurred as programmers were patching in a correction
   to a different problem.

   got terminated.

   hacked into the records of the Driver and Vehicle Licensing Agency in
   Minister Christopher Chope said.

   that hackers had been able to erase driving convictions from DVLA computer
   about unauthorized access to its computer records with the author of the
   Swansea in spite of the allegations."

   --  Intel Corporation said it had stopped shipping a computer network
   software program because some units were found to be infected with the
   computers and can potentially destroy data.

   copies of the program, called LANSpool 3.01, which inadvertently contained
   antiviral software.


   A number of computer makers and software publishers have issued similar
   alerts about the Michelangelo program and a variety of companies are now
   offering free software to check for the virus.

   There are more than 1,000 known software viruses that can copy themselves
   from computer to computer by attaching to programs and files.


                   "Attention Hackers, Uncle Sam Wants You!"

   interest in germ warfare to include electronic germs.

   The Army Center for Signal Warfare is soliciting proposals for the
   could destroy an enemy's computers or software (_Technology Review_, October
   the weapons business."

   Hein said the army first became interested in the potential of computer
   viruses as offensive weapons after Myron Cramer's 1989 article in _Defense
   Electronics_ suggested that computer viruses offered "a new class of
   electronic warfare."  But Gary Chapman, director of Computer Professionals
   infiltration of Soviet computers.

   likely to paralyze the heavily networked U.S. computer system than to
   infiltrate enemy computers.

   Hein insisted that the army will develop only controllable and predictable
   their very nature, uncontrollable.


   criminal case being brought by the Justice Department, charging the phone
   company with violating MFJ (Modified Final Judgment) through subsidiary
   potential conflicts of interest" resulting from individuals to be called as
   responsibilities under MFJ.  Greene, having dismissed Nynex motions, set

   received, Fax Mail can notify the subscriber automatically by depositing a

   Relax.  Commercial banks and other depository institutions can now obtain up
   policy from Aetna Casualty and Surety Co. offers insurance against computer
   service bureau and communications failures with Aetna Coverage for Computer
   1992, Page 16)

Le but de ce site est de mieux comprendre la sécurité informatique.
Un hacker par définition est une personne qui cherche à améliorer les systèmes d'information dans le seul et unique but de contribuer à la stabilité de ces systèmes!
La croyance populaire laisse entendre que les hackers sont des pirates.
C'est vrai. Mais il y a différents types de pirate.
Tout comme il y a différents types de personnes.
Les bavures courantes auxquelles on pense lorsqu'on évoque le terme de pirate informatique
seraient les hacks de compte msn, ordinateurs lâchement trojantés avec des exploits déjà tous faits
et encore peut-on classifier en tant que hack le fait de spammer
alors que depuis plus de 15 ans des scripts tous faits le font extrêmement bien?

Ce ne sont pas des hackers qui font ça!!!
Nous appelons ces gens des lammers! Quand ils sont mauvais,
ou des black hat lorsqu'ils sont doués dans la mise en application de leurs méfaits.
Aucun amour propre - Aucune dignité
Agissent par dégout, vengeance ou simple plaisir.
Les raisons peuvent être nombreuses et je ne prétends pas devoir juger qui que ce soit.
Je pense juste que l'on ne doit pas utiliser l'épée de fly pour commettre des injustices.
Il est 100 fois plus profitable d'améliorer un système que de marcher sur un château de sable... même si marcher sur un château de sable est rigolo :P
A vous de trouver votre amusement. ;)

Tu peux réagir sur la shootbox

Disclaimer Veuillez lire obligatoirement les règles ci-dessous avant de consulter ce site.
Conformément aux dispositions des différentes lois en vigueur, intrusions et maintenances frauduleuses sur un site, vol et / ou falsification de données.
Vous ne devez en aucun cas mettre en application les stratagèmes mis en place par ce site, qui sont présentés uniquement à titre d’éducation et de recherche dans le domaine de la protection de données.
Vous ne devez en aucun cas utiliser ce que vous aurez découvert, sauf si vous avez une autorisation écrite de l’administrateur d’un site ou que celui-ci vous ai ouvert un compte uniquement pour la recherche de failles.
Tout cela est interdit et illégal ne faites pas n'importe quoi.
Vous acceptez donc que l'administrateur de ce site n'est en aucun cas responsable d'aucun de vos actes. Sinon quittez ce site.
Vous êtes soumis à ce disclaimer.