Need som help asap! =)

Discussion in 'Security' started by Wulkanen, Jan 7, 2011.

  1. #1
    Hey, I got an assignment to figure out an admins password for a site. It's not a real site, it's just a test one.

    The string I have is:
    index.php?username=admin&password=password&Submit=Log+in

    (PM me if you need the full link to the website)

    The username is admin, the password is unknown.
    Is there any way to figure out the password by changing the URL string?
    Please help, thanks. =)
     
    Last edited: Jan 7, 2011
    Wulkanen, Jan 7, 2011 IP
  2. underground-stockholm

    underground-stockholm Guest

    Messages:
    53
    Likes Received:
    1
    Best Answers:
    0
    Trophy Points:
    0
    #2
    Could be affected by SQL Injection.
     
    underground-stockholm, Jan 10, 2011 IP
  3. ARTidas

    ARTidas Active Member

    Messages:
    177
    Likes Received:
    9
    Best Answers:
    0
    Trophy Points:
    53
    #3
    @Wulkanen

    I suggest read after the PHP function cURL at this site: http://curl.haxx.se/
    You will also need an fOpen function
    A goof randomizing engine to generate the passwords. (Or a dictionary array)
    And last a foreach or for cycle to get started :)

    Cheers,
     
    ARTidas, Jan 10, 2011 IP
  4. Wulkanen

    Wulkanen Well-Known Member

    Messages:
    2,429
    Likes Received:
    47
    Best Answers:
    3
    Trophy Points:
    175
    #4
    no worries, I solved it.

    I just had to change it to:
    index.php?admin=1&password=true
    or something like that, I don't remember. =)
     
    Wulkanen, Jan 10, 2011 IP
  5. submitmaster

    submitmaster Well-Known Member

    Messages:
    329
    Likes Received:
    2
    Best Answers:
    0
    Trophy Points:
    103
    #5
    this could mean you really want to hack into someones site..so any help from anyone would not be a good idea....
     
    submitmaster, Jan 24, 2011 IP
  6. Wulkanen

    Wulkanen Well-Known Member

    Messages:
    2,429
    Likes Received:
    47
    Best Answers:
    3
    Trophy Points:
    175
    #6
    Dude, it was a school assignment. And I solved it long time ago if you read the comments, so
    your post is not of any use except for making your post count higher...
     
    Wulkanen, Jan 24, 2011 IP