DBHunter
Infinity Member
Golden Member
- Joined
- August 23, 2025
- Messages
- 2,526
- Reaction score
- 6,527
- Points
- 113
- Thread Author
- #1
I have compromised observers.icaiexam.icai.org website of ICAI that hosts whole examination process for CA Final, Intermediate and Foundation exams.
This portal basically hosts all observers centerwise and their application forms. In short examination process is as under:
Question Papers -> Bluedart Courier -> Bank of Baroda -> Suprintendent/observer (selfie and location and key from observer application) codes are checked -> Question Papers sent to Exam Center -> Opening of Question Paper -> Exam start
Single Point of Failure is Suprintendent/observer when they collect Question Papers from Bank. Selfie location easily spoofable. Key is easily obtainable from their vulnerable website. Note there will be three people together for above collection. But overall its easy. Compromise any one observer and whole examination is done for. You can buy question paper photos from them, etc. (not my intention, please dont do it. dont play with life of students, I am just doing it to show off my skills)
I am uploading all of observers application forms [9K + PDFs compressed int 224 MB 7z file] here that contains Name, Mobile Number, Photo, Signature, Address, DOB, PAN, Place, Email, Bank Account No., Bank Name, Bank Branch, IFSC Code of observers for upcoming September/November 2026 exams.
Note to ICAI: just accept the truth that your websites are vulnerable and there was data breach. If you dont put official notification and dont accept the truth, I will hack all of your website and I will make every CA degree worthless. In the end you will have to accept the truth, it is better to accept the truth now. If you accept the truth now, I wont hack any of your website. one more thing check students answersheets correctly, otherwise I will expose all of your lies. If you dont do anything, it will more shameful and every chartered accountant degree will be worthless.
Note: ICAI has spent Rs. 40 crore + in a single year for IT & Website Maintenance Expenses. how funny.
Here is anon share link that is available 24x7.
This portal basically hosts all observers centerwise and their application forms. In short examination process is as under:
Question Papers -> Bluedart Courier -> Bank of Baroda -> Suprintendent/observer (selfie and location and key from observer application) codes are checked -> Question Papers sent to Exam Center -> Opening of Question Paper -> Exam start
Single Point of Failure is Suprintendent/observer when they collect Question Papers from Bank. Selfie location easily spoofable. Key is easily obtainable from their vulnerable website. Note there will be three people together for above collection. But overall its easy. Compromise any one observer and whole examination is done for. You can buy question paper photos from them, etc. (not my intention, please dont do it. dont play with life of students, I am just doing it to show off my skills)
I am uploading all of observers application forms [9K + PDFs compressed int 224 MB 7z file] here that contains Name, Mobile Number, Photo, Signature, Address, DOB, PAN, Place, Email, Bank Account No., Bank Name, Bank Branch, IFSC Code of observers for upcoming September/November 2026 exams.
Note to ICAI: just accept the truth that your websites are vulnerable and there was data breach. If you dont put official notification and dont accept the truth, I will hack all of your website and I will make every CA degree worthless. In the end you will have to accept the truth, it is better to accept the truth now. If you accept the truth now, I wont hack any of your website. one more thing check students answersheets correctly, otherwise I will expose all of your lies. If you dont do anything, it will more shameful and every chartered accountant degree will be worthless.
Note: ICAI has spent Rs. 40 crore + in a single year for IT & Website Maintenance Expenses. how funny.
Here is anon share link that is available 24x7.
