Nathan Michael USES World of Warcraft
Nathan says he sold World of Warcraft gold.
Explicit Confidence 99% · Nathan Michael EP 164 Details
“Then we sold WoW gold.”
Qualified triples from the transcripts. Origin, speaker, and evidence stay attached. These are not independently verified facts.
Nathan Michael USES World of Warcraft
Nathan says he sold World of Warcraft gold.
Explicit Confidence 99% · Nathan Michael EP 164 Details
“Then we sold WoW gold.”
Nathan Michael USES credit card dumps
Jack says Nathan entered chat rooms where credit-card dumps were sold or traded and obtained full card details.
Explicit Confidence 98% · Jack Rhysider EP 164 Details
“This led him to chat rooms where people were selling or trading credit card dumps.”
Nathan Michael USES skimmer
Nathan says he purchased and deployed skimmers, including at gas pumps and ATMs.
Explicit Confidence 99% · Nathan Michael EP 164 Details
“I had gas pump ones and everything.”
“we had ones on ATM machines, too”
Nathan Michael USES cjb.net
Nathan says he used cjb.net to publish snippets from internal emails and confidential information.
Explicit Confidence 99% · Nathan Michael EP 164 Details
“I put it on the cjb.net website, just a little HTML thing with some snippets from the e-mails”
Nathan Michael USES Walmart
Nathan says he and associates used Walmart registers to test stolen card numbers and obtain gift cards.
Explicit Confidence 98% · Nathan Michael EP 164 Details
“We’d just sit there and run that bitch and get whatever we get off of them.”
Nathan Michael USES counterfeit payment card production
Nathan printed counterfeit cards, programmed their magnetic stripes, and added photographs to make them appear legitimate.
Explicit Confidence 99% · Nathan Michael EP 164 Details
“I’d print the cards and then program the mag strip”
Nathan Michael USES swiping
Nathan explains that he trained people to act as swipers and planned their shopping routes.
Explicit Confidence 99% · Nathan Michael EP 164 Details
“I’m teaching you to be a swiper.”
Nathan Michael USES shopper network
Nathan recruited shoppers to use counterfeit cards in stores and return purchased merchandise.
Explicit Confidence 99% · Jack Rhysider EP 164 Details
“have them go out and shop with stolen credit cards and then bring back any of the stuff you buy with it”
Nathan Michael USES Liberty Reserve
Nathan says he used Liberty Reserve as web money and lacked it when deciding to use freshly skimmed cards.
Explicit Confidence 98% · Nathan Michael EP 164 Details
“back then it was Liberty Reserve. We had no Liberty Reserve to buy any — our web money.”
SQL injection AFFECTS SQL server
The episode describes an SQL injection attack against the SQL server itself.
Explicit Confidence 96% · Tanya Janca EP 165 Details
“‘cause they attacked the SQL server itself”
Tanya Janca ASSOCIATED_WITH Canadian government
Tanya held a security leadership position at an organization within the Canadian government.
Explicit Confidence 98% · Jack Rhysider EP 165 Details
“a security leadership position at an organization which was within the Canadian government”
Tanya Janca ASSOCIATED_WITH Application security
Tanya's professional focus is application security, or appsec.
Explicit Confidence 99% · Jack Rhysider EP 165 Details
“that’s called appsec, application security. She’s laser-focused on how applications become insecure and how to make them secure.”
Tanya Janca ASSOCIATED_WITH Defcon
Tanya attended Defcon and took a blind SQL injection workshop there.
Explicit Confidence 99% · Tanya Janca EP 165 Details
“So, then I went to Defcon and I did a workshop called Blind SQL Injection.”
Tanya says ZAP used to be part of OWASP.
Explicit Confidence 99% · Tanya Janca EP 165 Details
“ZAP is a dynamic scanning tool that used to be part of OWASP”
Jack Rhysider AUTHORED Darknet Diaries
Jack says that he created the Darknet Diaries show.
Explicit Confidence 99% · Tanya Janca EP 165 Details
“This show is created by me, the spaghetti coder, Jack Rhysider.”
Server-side request forgery DISCOVERED_BY Tanya Janca
Tanya says she found server-side request forgery while testing an application.
Explicit Confidence 98% · Tanya Janca EP 165 Details
“I found server-side request forgery.”
Blind SQL injection LEADS_TO Data exfiltration
The episode explains that blind SQL injection enabled the attacker to infer and exfiltrate the database contents.
Derived Confidence 94% · Tanya Janca EP 165 Details
“So, they did exfiltrate our data, and that is what happened”
“you can know for sure that it’s true”
Tanya Janca USES incident response
Tanya led incident responders and managed serious security incidents.
Explicit Confidence 99% · Tanya Janca EP 165 Details
“So, I was the lead of the incident responders.”
“I’m the head of incident response.”
Tanya Janca USES Wireshark
Tanya directed her team to use Wireshark to investigate the supposed malware incident.
Explicit Confidence 99% · Tanya Janca EP 165 Details
“someone flip on Wireshark.”
Tanya Janca USES SQL injection
Tanya used SQL injection to bypass a login screen during a CTF.
Explicit Confidence 99% · Tanya Janca EP 165 Details
“I’m sure there’s gonna be some sort of SQL injection opportunity.”
“we got in.”
Tanya Janca USES Burp Suite
Tanya learned and used Burp Suite as part of her penetration-testing work.
Explicit Confidence 96% · Tanya Janca EP 165 Details
“go learn Burp Suite this weekend”
“I just found server-side request forgery.”
Tanya Janca USES penetration testing
Tanya was recruited to help perform penetration tests.
Explicit Confidence 97% · Jack Rhysider EP 165 Details
“You can help me do some penetration test.”
Tanya Janca USES Server-side request forgery
While penetration testing, Tanya entered code that resulted in server-side request forgery and unintended file operations.
Derived Confidence 84% · Tanya Janca EP 165 Details
“Inadvertently, I started copying and deleting files on the web server.”
“I found server-side request forgery.”
Tanya Janca USES Capture the Flag
Tanya participated in CTFs and organized two women's CTF teams.
Explicit Confidence 99% · Tanya Janca EP 165 Details
“I did do a few CTFs.”
“we had to form two teams”
Blind SQL injection VARIANT_OF SQL injection
The episode presents blind SQL injection as a form of SQL injection that returns yes/no-style results rather than directly returning data.
Derived Confidence 96% · Tanya Janca EP 165 Details
“what you’re doing when you do blind SQL injection is you are asking questions”
“the only option you get back is yes or no”