Waraxe IT Security Portal

Larsie1995 · Beginner

Hello, i'm new here.
I've read the topic about the script from waraxe: Username Fetching Exploit Cutenews.
In that topic waraxe says that you don't have to crack the md5 first, because with a cookie editor you can edit the cookie.
But i don't know how Embarassed

Already i saw a question how to in that topic, and waraxe says:

username=admin;md5_password=ad346350ac2395b917e0fee9fbc1e910;

Well with the
AnEC Cookie Editor Add-on (Firefox), i make a new cookie:
name: __utmz
content (yes the username is admin): username=admin;md5_password=ad346350ac2395b917e0fee9fbc1e910;
Host: example.com (example)
Path: /cutenews/index.php
Send for: any type of connection
Expires: at end of session

What do i wrong?
Please help, i'm not very good in those things Embarassed

Larsje1995.

pexli · Valuable expert

Try to write 2 cookie.First with username,second with password.

Larsie1995 · Beginner

I've tried, i wrote to the cookie __utmz with:
username=admin;md5_password=ad346350ac2395b917e0fee9fbc1e910;

but it don't work, only i get is the content username=admin, md5_password=(hash) is deleted from the cookie :S

what do i wrong?