|
|
|
|
Menu |
|
|
Home |
| |
|
Discussions |
| |
|
Tools |
| |
|
Affiliates |
| |
|
Content |
| |
|
Info |
| | |
|
|
|
|
|
User Info |
|
Membership:
Latest: MichaelSnaRe
New Today: 0
New Yesterday: 0
Overall: 9144
People Online:
Visitors: 127
Members: 0
Total: 127
|
|
|
|
|
|
Full disclosure |
|
|
|
|
|
|
|
|
|
IT Security and Insecurity Portal |
|
|
Help with weird cookie |
|
Posted: Wed Feb 21, 2007 9:18 am |
|
|
darkclaw |
Regular user |
|
|
Joined: Aug 04, 2005 |
Posts: 14 |
|
|
|
|
|
|
|
Hello!
Got this cookie using XSS, but I don't understand its format.
Its supposed to be from php 2.0.19, but i see a "dot" in the middle of the md5 hash.
Take a look:
Code: |
Cookie: phpbb2mysql_data=a:2:{s:11:\"autologinid\";s:32:\"98426820545dbf8717354f5.73329275\";s:6:\"userid\";i:77;}; PHPSESSID=c7134a61f1aa83b2e77c3981f55dc2a9; phpbb2mysql_sid=c5b9a09b715b8a8e09d14cbef13ee73c; phpbb2mysql_t=a:1:{i:4897;i:1172043906;}
|
Can't understand what's wrong.
Any guess?
Thanks. |
|
|
|
|
Posted: Wed Feb 21, 2007 8:29 pm |
|
|
Chb |
Valuable expert |
|
|
Joined: Jul 23, 2005 |
Posts: 206 |
Location: Germany |
|
|
|
|
|
|
If I remember correctly they changed the algorithm for the cookie since 2.0.18 or so. So you will not get a MD5 hash of a user that way. |
|
|
|
|
www.waraxe.us Forum Index -> PhpBB
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum
|
All times are GMT
Page 1 of 1
|
|
|
Powered by phpBB © 2001-2008 phpBB Group
|
|
|
|
|
|
|