Waraxe IT Security Portal

CraZiesT · Regular user

Hello everyone,
I have cookies for 3 admins in a site,i can log in with their cookies and i can browse their msgs and so on,but the question is how can i use these cookies to get into the administration panel?
so far i heard there is no way,but just let me give it a try in this forum.
I know that vb hash passwords cannot be cracked easily.
Anyway if anyone can help me out or can come up with an idea that can make me get into the admin panel will be really appriciated. Thanx

tehchad · Beginner

You can't log into a vBulletin admin or mod CP with cookies, because they always require password authentication.

The hash you have has been hashed three times over (twice on random values), so I wouldn't reccomend trying to crack it.

You used XSS to obtain these cookies? If they haven't patched it you can use the same exploit again and try using some methood of logging the keystrokes when the admin logs in.

CraZiesT · Regular user

Thanks for ur reply tehchad.
I used a php log to get the cookies,
http://www.linux-soul.net/vb/printthread.php?t=749
How can i use the same exploit to get the keystrokes?that means i need to send a keylogger to the admin?,which i did,i sent undetectable trojan from one admin to the other,but they noticed later,i didnt get enough time to get their passwords and they then changed their passwords Sad

in other words i gave up Very Happy

on that site,thats why i sent a trojan.