is this an ecrypted password, how do i crack it?

andrej013 · Post by **andrej013** » 07 Sep 2008, 05:53

or maby it isnt.
I dont know.
this is from one of mine cookies.
I want to understand how cookies work, and I give u my cookie for burek.co.yu
is here my user name, and pass? if it is, u can have it

but pls, how do I find out what info are here?

Code: Select all

__utma
233994637.1563115614.1198004201.1198096002.1214776643.3
burek.co.yu/
1600
219368704
30087126
469563600
29940275
*
__utmz
233994637.1214776643.3.1.utmccn=(direct)|utmcsr=(direct)|utmcmd=(none)
burek.co.yu/
1600
3622382848
29976987
470343600
29940275
*

G-Brain · Post by **G-Brain** » 07 Sep 2008, 05:57

No login info.

__utmz=XXXX.TTTTT.V.C.utmccn=<campaign>|utmcsr=<source>|
utmcmd=<medium>|utmctr=<keyword>

Where:
XXXX = hash of your domain name
TTTTT = Timestamp when the cookie was set
V = How many visits they had made when the cookie was set
C = How many different sources this visitor has come from

andrej013 · Post by **andrej013** » 07 Sep 2008, 06:15

WOW, f-ing great!
and what would login info look like?

and where on my com login info for burek.co.yuare stored if not in this cookie?(burek is forum so I must have login info)

G-Brain · Post by **G-Brain** » 07 Sep 2008, 06:30

andrej013 wrote:and what would login info look like?

I've seen

Code: Select all

user=test;pass=test

a couple of times.

andrej013 wrote:and where on my com login info for burek.co.yuare stored if not in this cookie?(burek is forum so I must have login info)

It's stored in your session, which is stored server-side, which you can't access unless they're running insecure software.

andrej013 · Post by **andrej013** » 07 Sep 2008, 06:39

and what is the diference between
cookies stored here:
C:\Documents and Settings\Andrej\Local Settings\Temporary Internet Files
and here:
C:\Documents and Settings\Andrej\Cookies
?

so, is there some usefull info on cookies?
do you know which sites store login info in cookie?
just one would be enough..
I just want to see it

thx brain!

Nerdz · Post by **Nerdz** » 07 Sep 2008, 08:06

These days, most of the alert website don't store credentials in a cookie... There are always website to test your teeth on... which are legal. Google hacking challenge.

andrej013 · Post by **andrej013** » 07 Sep 2008, 09:07

HA!
I finaly found it!
in:
X:\Documents and Settings\User\Application Data\Mozilla\Firefox\Profiles\something.default

there is a file signons3
there FF3 stores login info.
here is my username for site
username
MDoEEPgAAAAAAAAAAAAAAAAAAAEwFAYIKoZIhvcNAwcECFjcM4wC6/y8BBDtCTaUK38Pu3NWaLtLjOwN
http://www.srbijauzivo.co.yu

how do I decript it?
I mean, I know what it is, but how?