Person
person:finn
Teenager interviewed about accessing and modifying school systems and publishing private information.
Teenager interviewed about accessing and modifying school systems and publishing private information.
“I was looking for the WiFi password of my school.”
“I’m in.”
| Direction | Predicate | Other entity | Origin | EP |
|---|---|---|---|---|
| outgoing | EXPLOITS | exposed shared folder | Explicit | 17 |
| outgoing | USES | Google Drive | Explicit | 17 |
| outgoing | USES | Data exfiltration | Derived | 17 |
| outgoing | USES | credential reuse | Explicit | 17 |
| outgoing | USES | Explicit | 17 | |
| outgoing | USES | Admin Panel Finder | Explicit | 17 |
| outgoing | COMPROMISES | school website | Explicit | 17 |
| outgoing | USES | Pastebin | Explicit | 17 |
| outgoing | USES | unauthorized account access | Explicit | 17 |
| outgoing | USES | Bugtroid | Uncertain | 17 |
| outgoing | USES | penetration testing | Derived | 17 |
| incoming | ATTRIBUTED_TO | Finn school hacking incident | Explicit | 17 |
Finn school hacking incident ATTRIBUTED_TO Finn
The school hacking incident is attributed to Finn; he later describes carrying out the account and website compromises.
Explicit Confidence 99% · Jack Rhysider EP 17 Details
“Finn now has logged into the school’s main website as the principal.”
Finn EXPLOITS exposed shared folder
Finn accessed an exposed shared folder/server that allowed users to view files associated with another person’s computer.
Explicit Confidence 98% · Finn EP 17 Details
“This shouldn’t be open like this.”
“You were able to see what they had downloaded, what they were holding on their computer”
Finn USES Google Drive
Finn used Google Drive to copy files from the exposed folder without directly downloading them.
Explicit Confidence 99% · Finn EP 17 Details
“I would get the folder and open Google Drive on the browser and I would copy and paste the files into there”
Finn USES Data exfiltration
Finn copied files from the principal’s exposed folder into Google Drive, describing this as a way to avoid a download paper trail.
Derived Confidence 96% · Finn EP 17 Details
“I would copy and paste the files into there, that way there was no – I guess you could say, paper trail of me actually downloading the files.”
Finn USES credential reuse
Finn tried passwords found in the principal’s password document against the principal’s Twitter account and later reused the Twitter password on the school website.
Explicit Confidence 99% · Finn EP 17 Details
“I go through the list of passwords. I tried the first one on his Twitter”
“what if he’s using the password for his Twitter for this?”
Finn used the principal’s Twitter credentials to access and post from the principal’s Twitter account.
Explicit Confidence 99% · Finn EP 17 Details
“I look back down at my tablet and all I see is ‘Twitter would like to use your location.'”
“This fucking worked.”
Finn USES Admin Panel Finder
Finn scanned the school website with Admin Panel Finder to locate an administrative login page.
Explicit Confidence 99% · Finn EP 17 Details
“I first scanned the page using this app called Admin Panel Finder.”
Finn COMPROMISES school website
Finn logged into the school’s official website as the principal and altered the principal’s profile and biography.
Explicit Confidence 99% · Jack Rhysider EP 17 Details
“Finn now has logged into the school’s main website as the principal.”
“Finn’s access only allows him to change the principal’s bio.”
Finn used Pastebin to publish links containing private school-related documents and information.
Explicit Confidence 99% · Jack Rhysider EP 17 Details
“Finn went on to post links to Pastebin where he was posting private documents.”
Finn USES unauthorized account access
Finn gained unauthorized access to the principal’s Twitter account and the school website using credentials found in an unprotected password document.
Explicit Confidence 99% · Finn EP 17 Details
“I see at the bottom of the text document he has a Twitter password.”
“I looked back down at my tablet and I’m in.”
Finn says the tablet’s apps came from an app he thinks was Bugtroid, which contained apps used for penetration testing.
Uncertain Confidence 82% · Finn EP 17 Details
“The apps on it were from this app – I think Bugtroid.”
Finn USES penetration testing
Finn used a tablet configured with applications he described as being used for penetration testing.
Derived Confidence 86% · Finn EP 17 Details
“It was an app that had a bunch of the apps used for penetration testing.”