Hacker’s List is a website which allows you to anonymously hire what it claims are “professional” hackers to perform hacks ranging from hacking into Facebook and e-mail accounts to taking down websites and changing academic grades.
While the website’s terms and conditions forbid illegal activity and Hacker’s List claims it neither endorses nor condones illegal activity, a number of jobs posted on the website entailed illegal activity such as a post in which the hiring party expressed an interest in hiring a hacker to obtain “DBA” (database administrator) on a Microsoft SQL server which the poster indicated was vulnerable to exploitation, as the poster referred to the database server as “a Vuln MSSQL” server. Another bidder, who claimed to reside in Australia, indicated that they would be willing to pay up to $2,000 to get a list of clients from a competitor’s database, according to a recent post by the bidder, The NY Times reported.
I want the client lists from a competitors database. I want to know who their customers are, and how much they are charging them
Hacking a web-server and stealing its data is illegal. These types of cyber-attacks, hacking into websites in order to steal their databases, can come as the result of improperly sanitized input parameters which are exploited through input parameter injection attacks such as SQL injection attacks. SQL injection attacks can be used to dump remote vulnerable SQL databases.
The website has indicated that over 500 hacking jobs, which are referred to as “projects,” have been posted on the site since it was launched back in 2014. When a job is posted, the site’s hackers then bid against one another to win the contract, and the website acts as a go-between which takes a cut of the fee for completed jobs. The website holds funds until the hacker has completed the assignment and feedback has been received. If there’s a problem, the website claims that it will have a “dispute specialist” review the work.
A report on Mashable indicated that there are around 70 hacker profiles displayed on Hacker’s List, but many of them do not appear to be active. The report went on to say that hacking is no longer a task “reserved for high-stakes situations, like international espionage.”
Hacker’s List believes that hiring a hacker “shouldn’t be a difficult process,” as finding that “trustworthy” hacker should be a “worry free and painless experience.” The site further claims that their “strict review process” ensures that they keep “scammers and frauds away” and that if a professional hacker for hire or freelance hacker receives too many complaints, they’re removed from the website and prevented from rejoining.
A number of hackers with profiles listed on the website had provided hourly rates which ranged from $28 to $300, ZDNet reported. The report also indicated that many jobs listed on the site are “surprisingly” those in which customers are “pleading for hackers to break into school systems in order to change grades.”
What do you think, does Hacker’s List seem like a legitimate place to hire hackers?