Chris Monteiro USES Besa Mafia
Chris registered on Besa Mafia, placed a test order, and investigated the site's functionality.
Explicit Confidence 99% · Chris Monteiro EP 156 Details
“I will register on the website and see how it works.”
Person
person:chris_monteiro
Also: CHRIS
Cybersecurity professional who investigated darknet markets, Besa Mafia, and its exposed kill orders.
Cybersecurity professional who investigated darknet markets, Besa Mafia, and its exposed kill orders.
“Okay, yeah, I’m Chris Monteiro. I’m a cybersecurity professional.”
| Direction | Predicate | Other entity | Origin | EP |
|---|---|---|---|---|
| outgoing | USES | Besa Mafia | Explicit | 156 |
| outgoing | USES | URL parameter tampering | Explicit | 156 |
| outgoing | EXPLOITS | insecure direct object reference | Derived | 156 |
| outgoing | USES | cron job | Explicit | 156 |
| outgoing | USES | web scraping | Explicit | 156 |
| incoming | DISCOVERED_BY | insecure direct object reference | Derived | 156 |
Chris Monteiro USES Besa Mafia
Chris registered on Besa Mafia, placed a test order, and investigated the site's functionality.
Explicit Confidence 99% · Chris Monteiro EP 156 Details
“I will register on the website and see how it works.”
Chris Monteiro USES URL parameter tampering
Chris changed message identifiers in the URL to access other users' messages.
Explicit Confidence 99% · Chris Monteiro EP 156 Details
“I wonder if I change the message ID to something else; change it to 122. I got someone else’s messages.”
Chris Monteiro EXPLOITS insecure direct object reference
Chris exploited an insecure direct object reference by changing an object identifier and retrieving other users' private messages.
Derived Confidence 99% · Jack Rhysider EP 156 Details
“One user should never be able to access another user’s private data such as private messages like this.”
“he just changed one number in the URL.”
insecure direct object reference DISCOVERED_BY Chris Monteiro
Chris discovered the access-control flaw while inspecting Besa Mafia message URLs.
Derived Confidence 98% · Chris Monteiro EP 156 Details
“I looked at my order for taking out Bob the Builder, and I looked at the address bar, and I saw that there was an ID in the address bar.”
Chris Monteiro USES cron job
Chris used a cron job to pull down and process the site's administration data.
Explicit Confidence 99% · Chris Monteiro EP 156 Details
“I basically have a small cron job. I’m pulling them down fully as is.”
Chris Monteiro USES web scraping
Chris scraped kill orders from the site, including in near-real time.
Explicit Confidence 98% · Carl Miller EP 156 Details
“He’s beginning to scrape these kill orders”