Second password change hack(need help)

12/21/2009 13:48 katze123#16
because of the message kal gives ya ;P too often ;P
12/21/2009 14:00 fraggle1337#17
M000000AR infos about the (number from 000000-999999) shit pl0x <.<
[Only registered and activated users can see links. Click Here To Register...] ftw.... ?
12/21/2009 14:41 zilvis69#18
Ok even I managed to understand what to do , now its ur turn if u want and u try, u can ^_^
12/21/2009 15:13 chibis#19
just try to create/change the second password on any account, sniff the packet and u'll have the new "code".

Quote:
Originally Posted by zilvis69 View Post
lol that mod Mahatma didnt want to tell the real one thats why i didnt want to tell the real one -.- and dont u think this is kinda useless because u can change the pw with Change button instead of dll ?
Quote:
Originally Posted by fraggle1337 View Post
M000000AR infos about the (number from 000000-999999) shit pl0x <.<
ofc you don't know your second pw, that's why you have to bruteforce it, wich takes its time cuz 10^6 = 1.000.000 posibilities.

PHP Code:
if (strcmp command "secpw" ) == 0)
{
      
string oldpw "000000";
      
int x;
      
      for(
x;x<1000000;x++)
            {
               
PacketSend(0x**,"bss",2,"oldpw","000000");
               
oldpw+// dürfte so nich richtig sein ;)
               // Sleep(?);
            
}

12/21/2009 15:18 fraggle1337#20
I have the Packetnumber allready.... and i think your code wont work, right ? ;)
Look too simple :P
12/21/2009 15:22 chibis#21
Quote:
Originally Posted by fraggle1337 View Post
I have the Packetnumber allready.... and i think your code wont work, right ? ;)
Look too simple :P
why too simple? all it does is sending the packet 1.000.000 times with different secondpw, the only mistake in my source is "oldpw+1", this wont work (only to show you that u have to increase oldpw; use an array?)
12/21/2009 15:31 fraggle1337#22
You count up a string with +1 ? O.o
I know what bloodx mean with "numbers from 000000-999999, but i think your way is too simple - i tried whole yesterday...
Atm im looking for smth. like : [Only registered and activated users can see links. Click Here To Register...]
12/21/2009 15:35 chibis#23
Quote:
Originally Posted by fraggle1337 View Post
You count up a string with +1 ? O.o
I know what i have to do, but i think your way is too simple - i tried allread...
Atm im looking for smth. like : [Only registered and activated users can see links. Click Here To Register...]
thats what im saying, it wont work to add a number to a string, but the rest is correct.
thats why u have to find another way to increase oldpw each loop...
12/21/2009 16:53 MoepMeep#24
Just read the numbers from 000000-999999 from a file :p
Easierst way.
12/21/2009 16:58 fraggle1337#25
omg, thanks :facepalm:
< stupid ways xD
12/21/2009 18:11 Mahatma#26
Quote:
Originally Posted by MoepMeep View Post
Just read the numbers from 000000-999999 from a file :p
Easierst way.
wtf?
12/21/2009 18:12 5had0w#27
just write your code in a new thread and it wont be freeze... and like chibis said.. its close like he did @example code from him

just add beginn numbers . and end numbers ...
after pw got changed use "RECV packet from PASSWORD CHANGED."...
stop thread done.
12/21/2009 21:40 katze123#28
why not a for while from numbers 100000-999999 and make a string out of the int? XD
and then 000000 to 099999 e.g. xD
but there are easier ways ;P
12/22/2009 02:06 Mahatma#29
Quote:
Originally Posted by 5had0w View Post
just write your code in a new thread and it wont be freeze...
afaik it will freeze also (just at the beginning) if u write it in a new thread...
maby because u get spammed @ recv (answer from server) or aynthing like that^^
12/22/2009 10:05 rolubo#30
Quote:
Originally Posted by katze123 View Post
why not a for while from numbers 100000-999999 and make a string out of the int? XD
and then 000000 to 099999 e.g. xD
but there are easier ways ;P
because they want to make it difficult :P