08-22-2008, 02:35 AM
Well There are so many ways to hack "Powered by invision power board" . But Im going to use the easy one .. ok lets start
What we need?
Lets Start
1st you have to install Opera and perl
and after that run the Exploit with perl . and then you will get something like this
![[Image: see2xw3.png]](http://img396.imageshack.us/img396/4294/see2xw3.png)
ok this will Work on
Powered by invision power board v2.1.4
Powered by invision power board v2.1.5
Powered by invision power board v2.1.6
Powered by invision power board v2.1.3
so lets find a website
goto google and type one of those in the top
and you will get bunch of sites choose one
![[Image: see4.jpg]](http://i43.photobucket.com/albums/e372/xx_infesio_xx/see4.jpg)
and paste the link to forum in " Path to forum index" And click "Test forum vulnerability"
![[Image: see5.jpg]](http://i43.photobucket.com/albums/e372/xx_infesio_xx/see5.jpg)
if Site work with the exploit it will give something like this
if the site Docent work it will give somthing like this so then you have to choose a another site
![[Image: see6.jpg]](http://i43.photobucket.com/albums/e372/xx_infesio_xx/see6.jpg)
Now change the User ID to admins ID most of times user id will be 1 or 2
![[Image: 1-6.jpg]](http://i43.photobucket.com/albums/e372/xx_infesio_xx/1-6.jpg)
if everything is good click “Get date from databaseâ€
a hash should pop up where it says “Returned date:†(note: you cant crack this hash you can only cookie spoof all the hash’s will be salted)
Now you have the hash ! now whats left to do is to login in with admin or whatever user you choose.
First go to your vulnerable website and register enter all the information needed preferably not entering real info. ( if your not a retard )
Set a random username like : plorlt
set an email like: a@hotmail.com ( it doesn’t have to be real I have a way of getting it without doing the email verify)
when it says an email has been sent to blabla just go back to the forum index and login.
When your in go to tools>advanced>cookies… now you need to find the vulnerable sites cookie you need to be logged in !
When you get to that cookie simple open the file and edit the Hash with the one you got with the exploit, and edit the member_id to whichever one you use to get the hash.
Then delete everything else in the cookie only member_id and hash is needed.
Click ok and refresh the page you should be logged in as your target !
Hope this will help you . And if you have any problem with the tut pm me .Thanks
What we need?
Code:
Opera : http://www.opera.com/download/
Perl : http://downloads.activestate.com/ActivePerl/Windows/5.8/ActivePerl-5.8.7.813-MSWin32-x86-148120.msi
Exploit : http://www.sendspace.com/file/iny0qqLets Start
1st you have to install Opera and perl
and after that run the Exploit with perl . and then you will get something like this
ok this will Work on
Powered by invision power board v2.1.4
Powered by invision power board v2.1.5
Powered by invision power board v2.1.6
Powered by invision power board v2.1.3
so lets find a website
goto google and type one of those in the top
and you will get bunch of sites choose one
and paste the link to forum in " Path to forum index" And click "Test forum vulnerability"
if Site work with the exploit it will give something like this
if the site Docent work it will give somthing like this so then you have to choose a another site
Now change the User ID to admins ID most of times user id will be 1 or 2
if everything is good click “Get date from databaseâ€
a hash should pop up where it says “Returned date:†(note: you cant crack this hash you can only cookie spoof all the hash’s will be salted)
Now you have the hash ! now whats left to do is to login in with admin or whatever user you choose.
First go to your vulnerable website and register enter all the information needed preferably not entering real info. ( if your not a retard )
Set a random username like : plorlt
set an email like: a@hotmail.com ( it doesn’t have to be real I have a way of getting it without doing the email verify)
when it says an email has been sent to blabla just go back to the forum index and login.
When your in go to tools>advanced>cookies… now you need to find the vulnerable sites cookie you need to be logged in !
When you get to that cookie simple open the file and edit the Hash with the one you got with the exploit, and edit the member_id to whichever one you use to get the hash.
Then delete everything else in the cookie only member_id and hash is needed.
Click ok and refresh the page you should be logged in as your target !
Hope this will help you . And if you have any problem with the tut pm me .Thanks
