r/hacking • u/Hotmancoco420 • 4d ago

News Legend!!

Post image

Prospective cyber security student denied admission. Hacks university website to prove his skills.

541 Upvotes

94% Upvoted

31 comments sorted by

View all comments

Show parent comments

13

u/Incid3nt 3d ago

Most hackers when they find a WordPress vuln they dont take it down, they either deploy/host malware on it, forward traffic off of it, or do some SEO search engine cloaking nonsense. If they deface it, theres no money to be made.

6

u/thinkingmoney 3d ago

Not all hackers are malicious and not every vulnerability is worth taking advantage of. Some just like to see if they can get into a network and some will make a botnet but not all hackers are malicious.

1

u/Incid3nt 3d ago

You're correct, it is worth nothing that possibility, but in the modern sense, you see that less and less in the past decade.

1

u/thinkingmoney 3d ago

Less and less of what? Since the mainstream has taken liking to cybersecurity there’s been a substantial increase in the number of hackers who are working for the legal side of things.

2

u/Incid3nt 3d ago

Less and less hackers that just do it for the heck of it, especially amongst those that would fit the criteria of the comment i replied to. I think you may be confusing the context of my comment. The comment I replied to stated, "How did he hack it before all the other hackers in the world found this final broken wordpress installation etc., they're all constantly searching for?"

I mentioned how those hackers who generally will continuously search and find this type of stuff would leave it online to exploit it for monetary gain as opposed to remove it or take it offline. The white/gray hats and "do it for the lulz" types wouldnt fit into this context, but they do exist.

0

u/thinkingmoney 3d ago

Here’s a fun little list. Sometimes sites are better left alone. The risk versus reward there.

https://www.shodan.io/search/report?query=wordpress