Waraxe IT Security Portal

katakidoushi1 · Beginner

1st post, so bear with me Smile

If, say, I wanted to hack a forum such as "http://www.********.net/index.php" - I've read some thing about the cookie changing method, and have tried this with the same hashes other people have used for DIFFERENT forums. I think this is the reason it doesn't log into any admin account, and does not appear to do anything different to refreshing the page. If this is the case, can someone tell me where I get the hash key I need to put into the cookie box please? Smile

What i'm doing is using firefox + an addon -

-Going to the forum
-Tools
-Live HTTP Headers
-Refresh the page
-Getting something such as:

gibbocool · Advanced user

First of all, no posting vulnerable URLs.

2nd, there are many exploits for old versions of phpbb, search on http://www.milw0rm.com/search.php

3rd, you need to steal the cookie hash for that particular forum, no use using a different forum.

Snoop1990 · Advanced user

I guess what you have seen is the phpBB 2.0.10 hack ! but this issue is fixed a long time ago, so the hack won't succeed. It is not your fault, the forum seems to be secure.