6 replies to this topic

[jenniferrylie]

hey you guys
my name is kayla,
my friend gabe who he thinks is a master hacker says that no one cant get into this site and u definately have to be an instructor
i told him thats not true and its possible.
is it possible to download these instructor resources from this site for this book?
http://www.cengage.c...&subtab=showall

if anyone can help me i would greatly appreciate it

[nyphonejacks]

i doubt that anyone here is going to help you crack a legitimate account to access this site, but they say to contact them to get an account

Contact us for a Course.com Account

A Course.com Account will be setup only upon verification that you are an instructor.

* Colleges, Universities, Continuing Ed Depts, Vocational Schools:
Call Cengage Course Technology at 800-648-7450.
* Private Career Colleges, State and Government Agencies, Healthcare Organizations, and Correctional Facilities:
Call Cengage Learning at 800-648-7450
* K-12 Schools Customers call: 800-824-5179, select option 1
* International Customers

all you would need to do is determine what information that they use to verify that you are an instructor, and social engineer them into giving you an account...

[trevelyn]

i doubt that anyone here is going to help you crack a legitimate account to access this site, but they say to contact them to get an account

Contact us for a Course.com Account

A Course.com Account will be setup only upon verification that you are an instructor.

* Colleges, Universities, Continuing Ed Depts, Vocational Schools:
Call Cengage Course Technology at 800-648-7450.
* Private Career Colleges, State and Government Agencies, Healthcare Organizations, and Correctional Facilities:
Call Cengage Learning at 800-648-7450
* K-12 Schools Customers call: 800-824-5179, select option 1
* International Customers

all you would need to do is determine what information that they use to verify that you are an instructor, and social engineer them into giving you an account...

You could try brute force stuff too, like i saw in the first second of being there that the server responded with a unique error page saying "directory listing denied" when it actually hit a directory on the server and not when it was a 404. Try some web tools like Nikto if you really DO have permission to test their security.

[snakesonaplane]

Not that this at all relevant to the topic, but I once tried to get one of these posters:




By emailing the company and telling them that I was a chemistry professor at my university. I suppose I figured that the @uni.edu suffix would be enough to convince them. Apparently it wasn't, as they actually looked me up in the University phone directory and saw that I was a student. They called me out and said that they wouldn't send it. I ended up replying with remarks about being the biggest fan of Carol. I fucking begged them. They ended up sending me the poster after my statements of honesty and humility.

The moral of the story is not to underestimate companies and their verification of your credentials. Social engineering is not always the way.

[trevelyn]

Not that this at all relevant to the topic, but I once tried to get one of these posters:




By emailing the company and telling them that I was a chemistry professor at my university. I suppose I figured that the @uni.edu suffix would be enough to convince them. Apparently it wasn't, as they actually looked me up in the University phone directory and saw that I was a student. They called me out and said that they wouldn't send it. I ended up replying with remarks about being the biggest fan of Carol. I fucking begged them. They ended up sending me the poster after my statements of honesty and humility.

The moral of the story is not to underestimate companies and their verification of your credentials. Social engineering is not always the way.

That's AWESOME!! I love the poster and the way you got it is incredible - i loled at your plight though. you should frame it. i waltzed into a hotel here in pittsburgh not mentioning names, and started going into rooms and such and ended up in a conference room that had just let out of meeting i guess, papers and pencils and cups where still there, and I found this on a huge pad in the front of the room:



and i took it and just walked out of the building, no one said a word to me except the guy who help the door open when i left the building! I framed it, just cos of my troubles. You should too!

[nyphonejacks]

that poster is awesome...

[WaMu]

Do you know any foreign languages? If so, the "international option" is the way to go.

Back in High School, one of my history teachers used quizes from the teacher edition of the textbook. I bought the "privileged" teacher edition by claiming I taught at a school in Austria (I spoke a little German). So, I simply called them up, put on an obnoxiously fake German accent, and gave them fake school information (I think it was the Düsseldorf Weißen Gymnasium). Now, the textbook company didn't even know how to put the umlaut above the u, or get the s-set (the funny looking , let alone speak German to call and verify I was a teacher. They didn't know of Austria's teaching laws, any databases to run me through, and they couldn't even speak the language to call and verify my identity with anyone. In order to call, they'd need to enter the Austrian country code, pay a shitload of money, and so on.

So, they had someone willing to pay them $110, what do you think they did? To be frank, I don't know what steps they took to attempt to verify me, or if they even took steps for anybody else; but, within a few days, a received a package forwarded from Austria, with the teacher edition textbook and all the quizes.

These companies are so used to verifying people within the United States, that it'll come to a shock when they get an international costumer. They're used to going to American university websites, calling American schools, and identifying .edu web suffixes. Think of how hard it would be to verify someone living in a foreign land. Especially one that doesn't speak your native language. They'll probably take the easy way out and not even bother. Especially when money is on the line.

Edited by WaMu, 01 November 2009 - 01:46 PM.