Posted on Oktober 20, 2008 by busthood
echo ”
Gmail Brute Force Attacker
body {
font:Verdana, Arial, Helvetica, sans-serif;
font-size:12px;
border-color:#FFFFFF;
}
.raster_table {
background-color:#444444;
border-color:#CCCCCC;
}
.alert {
color:#FF0000;
DIarsipkan di bawah: Hacking | 1 Komentar »
Posted on Oktober 20, 2008 by busthood
My hack is highly influenced by GIJOE auto-login hack. This does exactly same thing but my approach is bit refined (I think so, feel free to disagree).
Followings are major changes.
1. In place of making a localized code change, I also changed “kernel/member.php” and added two new methods loginUserAuto (auto-login someone using saved cookies) and loginUserEmail (login someone using email as username).
2. I am using value stored in actkey column for auto-login feature. I too am totally against storing the MD5 of real password in user cookies (like the author of original auto-login and several other people). So here is perhaps the safer work-around. MD5 of actkey is sent to user’s browser as cookies and the same is matched for auto-login. I found this column useless after user activation – so why don’t we overload it.
Minor differences:
DIarsipkan di bawah: Hacking | Leave a Comment »