Waraxe IT Security Portal

0x01 · Regular user

http://forum/login.php

POST /login.php HTTP/1.1
Host: forum
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; de; rv:1.8.0.1) Gecko/20060111 Firefox/1.5.0.1
Accept: text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Language: de-de,de;q=0.8,en-us;q=0.5,en;q=0.3
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 300
Proxy-Connection: keep-alive
Referer: http://forum/login.php?sid=9dd7379c9efb7e1d6fbf65b8d900e51c
Cookie: phpbb2mysql_data=b%3A0%3B; phpbb2mysql_sid=9dd7379c9efb7e1d6fbf65b8d900e51c; phpbb2mysql_t=a%3A1%3A%7Bi%3A5957%3Bi%3A1144751593%3B%7D
Content-Type: application/x-www-form-urlencoded
Content-Length: 53
username=<username>&password=<password>&redirect=&login=Login
HTTP/1.x 200 OK
Content-Type: text/html
Server: Microsoft-IIS/6.0
X-Powered-By: PHP/4.3.10, ASP.NET
Set-Cookie: phpbb2mysql_data=a%3A2%3A%7Bs%3A11%3A%22autologinid%22%3Bs%3A0%3A%22%22%3Bs%3A6%3A%22userid%22%3Bs%3A3%3A%22477%22%3B%7D; path=/; domain=forum
Set-Cookie: phpbb2mysql_sid=9dd7379c9efb7e1d6fbf65b8d900e51c; path=/; domain=forum
refresh: 0; URL=http://forum/index.php?sid=9dd7379c9efb7e1d6fbf65b8d900e51c
Date: Tue, 11 Apr 2006 10:36:20 GMT
Connection: close
----------------------------------------------------------
http://forum/index.php?sid=9dd7379c9efb7e1d6fbf65b8d900e51c

GET /index.php?sid=9dd7379c9efb7e1d6fbf65b8d900e51c HTTP/1.1
Host: forum
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; de; rv:1.8.0.1) Gecko/20060111 Firefox/1.5.0.1
Accept: text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Language: de-de,de;q=0.8,en-us;q=0.5,en;q=0.3
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 300
Proxy-Connection: keep-alive
Cookie: phpbb2mysql_data=a%3A2%3A%7Bs%3A11%3A%22autologinid%22%3Bs%3A0%3A%22%22%3Bs%3A6%3A%22userid%22%3Bs%3A3%3A%22477%22%3B%7D; phpbb2mysql_sid=9dd7379c9efb7e1d6fbf65b8d900e51c; phpbb2mysql_t=a%3A1%3A%7Bi%3A5957%3Bi%3A1144751593%3B%7D

HTTP/1.x 200 OK
Cache-Control: private, pre-check=0, post-check=0, max-age=0
Pragma: no-cache
Content-Type: text/html
Expires: 0
Server: Microsoft-IIS/6.0
X-Powered-By: PHP/4.3.10, ASP.NET
Date: Tue, 11 Apr 2006 10:36:22 GMT
Connection: close
----------------------------------------------------------

hi, when i decode the phpbb2mysql_data code
i don't see an md5 hash, pls help me
i have many md5 hash for this board
but i cant login with change the cookie.

mfg

Aryan-Husky · Active user

They are not using the Auto Login check box so therefore you are not recieving the md5.