Waraxe IT Security Portal

badboy · Regular user

I have got access to a forum by

exploiting the forums

i have the admin hash

but havent had luck with cracking

so i added it to the mozilla cookies so i would auto login

which worked

-------------------

but now i need access to the ADMIN CPANEL
but the problem is it asks to enter the password because theres no login session found

plz help

thanks

im talking about invision power board btw

diaga · Regular user

I'd assume you got access of a phpbb forum - the forum has nothing to do with cPanel. Your only bit of chance is decrypting the has (it's encrypted in MD5) and then trying that password via cpanel.

As for the user name, if you can upload a php file onto their server and run it - and generate an error, you will get the cpanel user name

goodluck

badboy · Regular user

i told u it was invision

and the hash is like @!$!@#%$#&#%&YHGDFHDFHDFH

20 characters ive been brutefrocing for 3 months and its been on two online cracking things for 2 months

badboy · Regular user

BECAUSE IN INVISION THE ADMIN CPAENL DOESNT HAVE COOKIES, ITS LIKE ITS ASKING YOU TO CONFIRM THE PASS EVEN WHEN YOUR LOGGED IN AS ADMIN ANYWAY

is there a way to bypass THIs

shai-tan · Valuable expert

Please Try not to shout.....
I dont believe there is any way to bypass this its an extra security messure that Ivision has added like phpbb now has. All you have to do is login twice if you get the hash cracked and if I remember correctly they are either salted or md5 'ed twice over.