Hello, I am a penetration tester and I would love to help this community out, with what you ask? YOUR PRIVACY AND SECURITY! It seems a simple vpn just isn't enough to save you anymore.

Listen up, this site, like many others. Has a good chance of being vulnerable to one of the following. :

DDoS or DoS (Like all sites)
SQL Injection ::: !!HIGH RISK!!
XXS Scripting (Cross Site Scripting) ::: !!HIGH RISK!!

Let me give you some back story.

SQL Injection is what the official sony website was vulnerable to, and even major corps like GOOGLE have seemed to fall into the same mistake, all they did was mistype one code line. (In theory, the PHP code on the server side WAS SCRIPTED INCORRECTLY. This can cause MAJOR MAJOR ISSUES!!)

What harm can it do.
First of all, anything this site keeps track of is at risk. This includes.

Payment Information (If Any)
Usernames & Passwords, even though these passwords are encrypted, decryption is not unpopular.
Location Information & Internet Protocols!

Now I'm not saying its GUARANTEED that this is the case, BUT, It is not highly unlikely, it's actually not unlikely either.


***I WILL PREFORM THESE TESTS IF:
I HAVE THE SITE OWNERS PERMISSION

That's all I ask for.


ANY INFORMATION FOUND ABOUT THE SITE WILL BE BROUGHT TO THE ATTENTION OF PEOPLE WHO CAN FIX IT, IF ANY SERIOUS INFORMATION IS BROUGHT UP, WHICH IS ANYTHING BESIDES USERNAMES, PASSWORDS, AND LAST LOGGED STAMPS. I WILL SHARE THAT INFO WITH NO SOUL.


***ANY MODS, ADMINS, OWNERS ETC PLEASE PM ME & OR RESPOND TO THIS POST! ANYONE ELSE FEEL FREE TO LEAVE A REPLY!***


IF YOU ARE AN ADMIN, THE OWNER, OR A PERSON. BRING THIS TO THE ATTENTION OF THE OWNER AND OR ADMINS.

I know this is way off topic but this needed to be discussed

***IF I DO NOT HAVE PERMISSION I WILL NOT TEST THIS SITE, I AM REQUIRED BY LAW TO HAVE PERMISSION***

Thank you so much.
- No Name
- Penetration Tester

Look it up on udemy or she can take a collage course for it

please spread this post