So You Hacked Our Site!?

2008-02-29

Damn, they just re-secured it by changing the jscript to:

That's really unhackable.

2008-02-29

Henk Poley:
Too bad the page it points to if offline

It was taken offline a few minutes ago, probably in response to all the "hacking" that's been going on.

2008-02-29

thank you hackers for trying to destroy federal suppliers guides reputation. i have worked here with my wife for 10 years now and have helped hundreds of clients obtain federal government work. i have 4 children and though you don't care you are hurting the feelings of many good employees and customers by your immature actions. sorry our site wasn't protected to your standards however all of you are being reported to the appropriate authorities as we have your information too. you should of protected your info a little better. not only is the company legit we actually have held a 5 year GSA contract with the federal government and one of my best clients just broke 500,000 dollars in federal sales directly related to the GSA contract we got them. i am proud to work here and help small businesses obtain government workand also help federal buyers locate qualified small businesses to do business with. if you not interested in government work or our services of helping small businesses navigate the federal market fine but please don't slander the company. its rude, your comments are not truthful we are not a scam and i hope someday you realize that all you have to do is check us out with dun & bradstreet or GSA or the florida local and state chambers of commerce to see that what we do is real and federal buyers do request both our hardcopy guides and the online directory as well.

2008-02-29

Just changed again...

Somebody should tell them that changing the password will not help as long as the password is written there...

2008-03-01

This script is great, the messages are informative, kindly indicating which, of the password or UserID, is invalid, but it could be further improved:

if (form.id.value=="buyers" && form.pass.value=="gov1996") {
location="http://officers.federalsuppliers.com/agents.html";
} else if (form.id.value=="buyers" && form.pass.value!="gov1996") {
  alert('You got the UserID right, but not the password. The password is 
         gov1996. You MUST enter gov1996 in the password field.');
} else if (form.id.value!="buyers" && form.pass.value=="gov1996") {
  alert('The password is correct, but not the UserID. Please, 
         enter "buyers" (without the quotes) as UserID.');
} else {
  alert('Hey, you didn't got anything right. Please, take note of 
         that: The UserID is "buyers" (without the quotes) and the password 
         is gov1996. Put the UserID in the top box, where it's written 
         "User:". Put the password in the bottom box, where it's written 
         "Password"');
}

2008-03-01

Due to the bytes shortage we've been experiencing, I fell a need to sum 90% of the next 300 posts.

1- (reply to 180051) Your security sucks! There was no hacking at all. You don't know how to type or spell. You sent the password and blah blah blah... 2- Now the UserID is "moron" and the password is "scam3000" 3- Hey everyone, they changed the page to http://www.federalsuppliers.com/warning.html 4- Too bad they put it offline now. But I bet it still is available on Google's cache.

If your post resembles any of the statements above, don't bother. Save those precious bytes to something that have not been written countless times. Thank you

2008-03-04

lank:
Dang, now you need the password to get in
// **** You WILL NOT get access without a valid password **** var suffix = ".html"

// **** javascript:IPcatch:subject?Source_code_violator **** var pass_msg = "Password: ";

function go_there() { location.href = document.pass_form.pass.value + suffix; }

document.write('<form name="pass_form" onSubmit="go_there();return false">'

pass_msg + '<input type="password" name="pass" size="20" value="">'

' <input type="button" value="Verify" onClick="go_there()"></form>');

Don't worry... you can still get in using a google search.

That way you don't have to "hack" the site by using the password "listing" that someone was kind enough to find for us.

2009-12-14

Apparently these people have learned their lesson. Out of curiosity, I checked their new login page here, and tried to enter, without success. In fact, without any effect at all. So I checked the source for that login page... and aside from some weird nested tables in the login form, the real novelty is that it lacks an action entirely. Click that login button however many times you want, the form will never be submitted anywhere.

Now THAT is what I call unhackable. Of course, it's also bloody useless.

So You Hacked Our Site!?

Featured Comments