Welcome to HBH! If you had an account on hellboundhacker.org you will need to reset your password using the Lost Password system before you will be able to login.

Need help on reverse engineering an image verification

  1. Home
  2. Forum
  3. Web hacking
  4. Need help on reverse engineering an image verification

ghost's Avatar

ghost

0 0

http://www.nordicmafia.net/nordic/image.php?id=NjOjUj1%2B2ZxMeW%2FHbqu5md%2B8cVGEuUfGRvnI8gt2n6k%3D&key=182be0c5cdcd5072bb1864cdee4d3d6e Along with the code I enter, this is sent along too: <input type="hidden" name="img_h2l" value="702815644cb866ab73d7a6ee58524198">

http://www.nordicmafia.net/nordic/image.php?id=ufnhwHJ%2FesnSxU71a9qAq%2FNcQfeFvZa2dUCZX92tmv8%3D&key=c74d97b01eae257e44aa9d5bade97baf <input type="hidden" name="img_h2l" value="7d02756db133f459855c6de9892cbfaf">

http://www.nordicmafia.net/nordic/image.php?id=HmhUrPB%2FSMdVMMWDlcR2KzIguq%2Fr6MYUZG8QFFoUdOc%3D&key=c32d9bf27a3da7ec8163957080c8628e <input type="hidden" name="img_h2l" value="23fd51e05f96ef85d425d796973bc1c6">

The key value is always some random number between 0 and 500 encrypted with md5, but the id value, I dont know what is. It looks like base64 code because of the = at the end. I have ni idea about the img_h2l value.

I know it is possible to reverse engineer it, my friend did but wont tell me how. Any ideas ?


ghost's Avatar

ghost

0 0

I found out how to get pass the image verification, if I just keep POST'ing this: img_h2l=702815644cb866ab73d7a6ee58524198 code=cb56fc9

It works everytime.