protection

[n3rd]

I found a site, know how to hack it, did it in the past. but now they made a new protection, does some 1 know what it is.

they wrote: input type="hidden" name="HHH" value="17e358ee6b15a8d988888a0a26dab8b2">, is this some kind of encrypted value?.

[bad_brain]

hm, most likely it's the session ID, check the cookie, it will most likely include the same. when deleting the cookie and/or reload the site you will get a new ID....but if you were already logged in it might be your password md5 hash (but it's most likely the first option)

[Gogeta70]

If you're talking about laazy.com, i helped him secure his site against that attack.

The guy had a hidden value in the form that gave your user nam. That form allowed you to create a web page on their server under laazy.com/user/index.html. Well, if you used javascript to edit the user name, you could edit anyone's web page.

[n3rd]

its not laazy.com.

Badbrain, do u happen to know that that number is vital to hack a account of some 1 if I acces the account modification section instantly?.

[DNR]

You replayed the cookie thats probably why it worked.

DNR

[n3rd]

no, the code is in the script of the website.

but I wanted to know if the code is vital to acces other account names and rewrite their data.

[bad_brain]

I don't think so....

[n3rd]

so I could easily replace my name with the name of the admin, and I would not need a cookie code to not get irregulair acces, since I didnt get that before.