Hacker stole $100K from Users of California using SQL Injection Method

After a long time since my B.Tech Exams are over, Today I am going to write on a latest news that is how Hackers stole 100,000 $ from California users Based ISP using SQL injection. Now a days SQL injection being an easy and weakness on the web against Hacking! In 2013 we have seen a impressive improve in the variety of crack strikes tried against financial institutions, lending institutions and power organizations using various methods such as DDoS attack, DNS Hijacking, SQL injects and Zero-Day exploits as well. So lets know this one story below-

How to Hack PayPal Accounts to Steal User Private Info

PayPal as you all knows one of the leading companies in today’s online transaction. Recently Nir Goldshlager, founder of Breaksec and Security Researcher reported critical flaws in Paypal Reporting system that allowed him to steal private data of any PayPal account. Exploiting the vulnerabilities he discovered, allowed him to access the financial information of any PayPal user including victim's shipping address, Email addresses, Phone Number, Item name, Item Amount, Full name, Transaction/Invoice ID,  Transaction, Subject, Account ID, Paypal Reference ID and many more.

He found that PayPal is actually using the Actuate Iportal Application (a third party app) to display customer reports, so Nir downloaded the trial version of this app for testing purpose from its official website.

After going deeply through the source code of trial version, Nir located a file named getfolderitems.do that allowed him to access user's data without credentials. For more information see the pictures below-

 
Update- PayPal Security Team has fixed this bug now! Thanks…

Also read- How Hackers can Make Money with PayPal Bug Bounty Programs?

How Hackers can Make Money with PayPal Bug Bounty Programs?

Making Money in today's world is something not too difficult for a skilled person. Now Hackers and Researchers can make money via various programs online including PayPal Bug Bounty Program. PayPal as you all knows world leading site in sending and receiving money online. In a recent blog by Michael Barrett, Chief Information Security Officer of Paypal, he stated that if you manage to find a security flaw in any of the Paypal sites or products, then you will be rewarded with huge amount of cash. While Barrett till now did not stated how much cash the company will be offering but disclosed some vulnerability categories as stated below.

Top 8 Ways on How to Hack a PayPal Account

PayPal is one of the leaders in online money transection site. It is a part of eBay Inc. and a US $2.23 billion worth company! :> Around 75% of online money transfer is now made via PayPal. With PayPal, we can shop, buy products/items/goods, domains, web hosting etc. as it is accepted over 190 countries. PayPal comes with 3 types of accounts one is personal, second is premium and third is business, you can choose what suites you best. You can send,receive,withdraw and even hold Payments at PayPal for various purposes. But do you know that PayPal is considered as the best place for hackers to do hacking in 2012 as it has many bugs! Yes its true today i will teach you the top 8 ways by which we can hack PayPal accounts easily below. Enjoy!