Waraxe Forums

chiche · Regular user

Hello people, this is my firt post at the forum.
In the last time i have been testing diferents exploits related to sql injection and similar stuff becouse im intresting in the security of web aplications.
I proved many proof of concepts from this site and i learn a lot.
Many PoC gives u the md5 hash password of the administration of for example a forum site.
Succefully i get some md5 administration password from some sites of some friends of mine but i cant make anithing with it.
I think that i have to put the md5 in the cookie of the site but im a bit confusing, for example:
I go to my cookie archive for mozilla and add a similar cookie to a legitime one with the admin name and his md5:(all this isnt real).

somewhere.net FALSE / FALSE 1103836672 phorum_session_v5 admin%3A81dc9bdb52d04dc21036dbdr313ed075

Sometimes i get the following error when i tried to save the changes of the file with vi:

files timestamp changed

I dont know what that mean but some times that messagge appears to me and i cant save my changes.
Some other times the file let my save the changes but the cookie still dont work.

When i add a cookie to cookie.txt i cant see it on my cookie manager at mozilla .
Im think i am missing something or maybe i am doing all wrong.
If anyone can help me with some tip or recommend me some link to read about this i will appreciate a lot.

Please exuse my english and thanx a lot to everyone.
chiche

Heintz · Valuable expert

if you change cookie then at least you need to restart the browser,
look that other properties (domain, path time) are right also,
i'd reccommend learning how to set cookies with some programming language php or javascript so you can set cookies more easily now and later.
for more info search google Smile

luck.