Assorted Thoughts on Website Buying, Selling and Monetizing

Is-Hacked has released the video of how they hacked Flippa.

From earlier reports Flippa threatened to sue them if they released this video. I suspect that was sabre rattling. Even Flippa isn't that dumb to attract the negative publicity a law suit would inevitably do.

The vulnerability was simple, you could either click Forgot Password or Register. The email Flippa sends you contains a link that is designed to authenticate your email and contains a UserID in the url. To hack Flippa, you simply change the UserID. This can be to any UserID to find their profile info/private messages or as shown in the video an Administrator UserID.

They are taking questions and answering them on that blog post above.