Login or Register :: Home :: Search :: Your Account :: Forums :: Waraxe Advisories :: Tools :: September 9, 2026 Menu Home Logout Discussions Forums Members List IRC chat Tools Base64 coder MD5 hash CRC32 checksum ROT13 coder SHA-1 hash URL-decoder Sql Char Encoder Affiliates y3dips ITsec Md5 Cracker User Manuals AlbumNow Content Content Sections FAQ Top Info Feedback Recommend Us Search Journal Your Account User Info Welcome, Anonymous Nickname Password (Register) Membership: Latest: MichaelSnaRe New Today: 0 New Yesterday: 0 Overall: 9144 People Online: Visitors: 804 Members: 0 Total: 804 Full disclosure [0day-rubbish] Royal Server 5.04.50529.0 Local privilege escalation to LocalSystem on the execution path without credential override (7.2) [0day-rubbish] core-admin 1.0.164 (build 16468) Systemic shell command injection via ineffective quote escaping (8.8) [0day-rubbish] OP5 Monitor 9.20 Command injection surviving the CVE-2025-34115 patch (OPT-IN fix ineffective) (8.8) [0day-rubbish] QuantaStor 6.8.3.018 Command injection in the alert-mail command via the smtpPassword field (8.8) [0day-rubbish] SmarterMail 100.0.9693 (Build 9693) Antivirus command-line configuration executing as NT AUTHORITY\SYSTEM (7.2) [0day-rubbish] Jitterbit Agent 12.8.1.6 (Docker jitterbit/agent:12.8.1.6) Unauthenticated SOAP with hard-coded credentials leading to OS command execution (9.8) [0day-rubbish] Accurate Online Private Cloud on-prem (current) Unauthenticated Hessian deserialization leading to JNDI remote class loading (9.8) [0day-rubbish] DBxtra .NET 13.1.1.0 Unauthenticated SOAP API to xp_cmdshell code execution (9.8) **Subject:** CVE-2026-2035703: Tozed ZLT X300 5G CPE — Unauthenticated Remote Root Code Execution via TR-069 Command Injection (CVSS 9.8) CVE-2026-52307: Stored XSS in 1CMS v5.6 HP Easy Start for macOS: CVE-2026-12554 / CVE-2026-12555 /CVE-2026-12556 Next.js 16.4.0-canary.13 Image Optimizer DNS Rebinding TOCTOU SSRF Still Exists O-CMS 1.0.0 Authenticated OS Command Injection viaai_cli_script Flextype v1.0.0-alpha.3 CMS registerShortcodes() Remote Code Execution via Attacker-Controlled File Inclusion Flextype v1.0.0-alpha.3 Stored Fetch Shortcode Allows Server-Side Request Forgery IT Security and Insecurity Portal www.waraxe.us Forum Index -> General discussion -> modifying a cookie View previous topic :: View next topic modifying a cookie Posted: Fri Apr 28, 2006 8:45 am brennusje Beginner Joined: Apr 28, 2006 Posts: 4 Hi, I used a sql injection and found the aid and md5 hash of a admin acount. now i want to create a cookie to log in as that account. The problem is that the cookie is a bit more complicated then the one used in the guide. (its a php-nuke website btw). i'm sure waraxe should be able to explain this cookie, since his own website makes the exact same cookies! here's an example: lang english www.waraxe.us/ 1024 1077309056 29854064 3459385152 29780638 * phpbb2waraxe_data a%3A2%3A%7Bs%3A11%3A%22autologinid%22%3Bs%3A0%3A%22%22%3Bs%3A6%3A%22userid%22%3Bs%3A4%3A%221921%22%3B%7D www.waraxe.us/ 1024 1007309056 29854064 3418135152 29780638 * user MTkyMTpicmVubnVzamU6Y2MwM2U3NDdhNmFmYmJjYmY4YmU3NjY4YWNmZWJlZTU6MTA6bmVzdGVkOjA6MDowOjA6OjQwOTY%3D www.waraxe.us/ 1024 3218353792 29786673 3459225152 29780638 * The are line breaks or something which notepad doesnt seem to undewrstand. when openend in ultra edit etc it shows as line breaks. When i decode the base64 part we get this: 1921:brennusje:cc03e747a6afbbcbf8be7668acfebee5:10:nested:0:0:0:0::4096 1921 = userid brennusje = username cc03e747a6afbbcbf8be7668acfebee5 = md5 hash But what is all that stuff after it? do i have to change it or just leave it alone? And what about the first half of the cookie? i know i have to change the userid obviously, but what about all that stuff in front of and after autologinid? and the stuff after www.waraxe.us/ ? plz explain a bit more. Posted: Fri Apr 28, 2006 11:08 am waraxe Site admin Joined: May 11, 2004 Posts: 2407 Location: Estonia, Tartu Only cookie you must have in order to hijack the account, is "user" cookie. Other cookies, like "phpbb2whatever" will be automagically created in later. By the way, i hope, that your example md5 hash is not really yours, because: http://www.google.com/search?hl=en&q=cc03e747a6afbbcbf8be7668acfebee5&btnG=Google+Search Posted: Fri Apr 28, 2006 11:34 am brennusje Beginner Joined: Apr 28, 2006 Posts: 4 Hi, Yeah i posted my own cookie, it's not like a super secret pass or anything I've tried to edit the user cookie but i just cant seem to get it to work. The site only makes 2 cookies: lang english www.somesite.org/ 1024 1577897728 29854082 3885223824 29780656 * msa_resolution 1280x1024x16 www.somesite.org/ 1088 3931871232 31079283 3888033824 29780656 * user MTExOnRlc3RhY2M6c29tZW1kNWhhc2g6MTA6OjA6MDowOjA6OjQwOTY%3D%3D www.somesite.org/ 1024 383975168 29786692 547436528 29780657 * And phpbb2mysql_data a%3A2%3A%7Bs%3A11%3A%22autologinid%22%3Bs%3A0%3A%22%22%3Bs%3A6%3A%22userid%22%3Bs%3A3%3A%22111%22%3B%7D somesite.org/ 1024 4068028544 29854086 2086077344 29780661 * Now it seems that i am just not getting something. I know the aid and md5 hash of the admin, but when i edit the cookies accordingly it doesnt work. (i get the index as if i was a unknown user and cookies get overritten)[/i] Posted: Fri Apr 28, 2006 12:01 pm waraxe Site admin Joined: May 11, 2004 Posts: 2407 Location: Estonia, Tartu What browser you are using? IE? Posted: Fri Apr 28, 2006 12:40 pm brennusje Beginner Joined: Apr 28, 2006 Posts: 4 Yeah i use IE. should i try it with firefox/mozilla instead? Anyways, i cracked the md5 hash so no need anymore Thanks for the very informative site and quick replies. I'm amazed at how good you are at finding exploits, my compliments! (maybe phpnuke should hire you ) Posted: Fri Apr 28, 2006 12:55 pm brennusje Beginner Joined: Apr 28, 2006 Posts: 4 Yeah i use IE. should i try it with firefox/mozilla instead? Anyways, i cracked the md5 hash so no need anymore Thanks for the very informative site and quick replies. I'm amazed at how good you are at finding exploits, my compliments! (maybe phpnuke should hire you ) Posted: Fri Apr 28, 2006 2:21 pm waraxe Site admin Joined: May 11, 2004 Posts: 2407 Location: Estonia, Tartu Thanks for good words! And about IE and cookies - yep, beginning from IE 6 (if i remember right) there is some counter-tampering measures integrated to IE, so that simple manual txt file cookie editing is not working anymore. But Firefox cookie file is not protected modifying a cookie www.waraxe.us Forum Index -> General discussion You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum All times are GMT Page 1 of 1 All Posts1 Day7 Days2 Weeks1 Month3 Months6 Months1 YearOldest FirstNewest First Select a forumSecurity Research by waraxe----------------General discussionHow to fixMetasploit relatedHash cracking requests----------------MD5 hashesAll other hashesHash related informationhttp://www.waraxe.us portal----------------SuggestionsCooperation proposalsSecurity bugs and issues in general----------------Newbies cornerSql injectionCross-site scripting aka XSSRemote file inclusionFull path disclosureShell commands injectionPhishing and Social EngineeringAll other security holesVarious software----------------PhpNukePostNukePhpBBXMB forumvBulletin BoardInvision Power Boarde107MamboJoomlaXOOPSM$ WindowsLinux worldAll other softwareCoppermine Photo GalleryProgramming languages----------------PhpMySqlPerlJavaJavascriptC and C++Visual BasicBorland Delphi and PascalPythonHTML and XMLAssemblerReverse engineering----------------Newbies cornerDisassemblingPHP script decode requestsMiscellaneous stuff----------------Future of the ITNanotechnologyFun cornerLinksTry2hack sitesProxy databaseDirect Downloads----------------ToolsTutorialsWordlistsRecycle Bin----------------Removed messagesOutdated posts Powered by phpBB © 2001-2008 phpBB Group

PCWizardHub - Helping you fix, build, and optimize your PC life
All logos and trademarks in this site are property of their respective owner. The comments and posts are property of their posters, all the rest (c) 2004-2024 Janek Vind "waraxe"
Page Generation: 0.038 Seconds