Real-ly 1

I've found this stuffs …. [TXT] JohnDoe.txt 08-Aug-2007 23:35 84
[TXT] administrator.txt 08-Aug-2007 23:35 93
[IMG] one.jpg 08-Aug-2007 23:35 53K

But i still can't login as JohnDoe and the password ? What should i do next ? Or there are a cheaper way ?

did you open the files?

only_samurai wrote: did you open the files?

yeah, in JohnDoe : JohnDoe password = rd:5d2******* Network analysis sessionid: *17

in admi. : JohnDoe password = rd:5d2******* Network analysis sessionid: *****97

so what next…? still cant login…

research javascript injection :D

only_samurai wrote: research javascript injection :D

yaeh, i've tried that, still can't : javascript:document.cookie="AuthID=*****20" (i use admin. AuthID)

why ? Can you help me ?

there's a nice addon for firefox that'll make it easy. called cie edr

ynori7 wrote: there's a nice addon for firefox that'll make it easy. called cie edr

thanx, i try to get that first… any suggestion or another way ?

Your injection is wrong. You have to void the cookie;)

theres multiple ways to do it not just one

how can i change this cookie ?

moshbat wrote: here's an example… javascript:void(dcum**t.cok*e='stuffhere'); Could no article you found tell you that?

i've changed that cookie with administrator id… it works, the cookie has changed too ! but i still can't login…

nce you change the cookie your already loged in just go to the toys

fallingmidget wrote: nce you change the cookie your already loged in just go to the toys

…??? should i fill in both username and password ?

moshbat wrote: no, no. change your authid . the click on the link "toys" got it?

do you have any links that i can read ? make a better understanding of cookies yeah, so i can eat this cookies : )

You should really get in the habit of using google, but since I like your avatar, here.

If you look at your cookies, you will see that you have a different AuthID to the admins AuthID. I hope you know what AuthID stands for. If not google. The next thing is you should know what a cookie is and why we use it (google).

SwartMumba wrote: You should really get in the habit of using google, but since I like you avatar, here.

ok thanks SwartMumba i read that link first