Hack This Site - Realistic 1 Tutorial

[adofri]

can you do this in real life ;O? firebug thingy

[shockhawk]

Wait... question. So you've changed the website, but only for you right? If someone else went to the website, it wouldn't look like the way you changed it to, correct? How do you make it so that everyone can view your changes? Help, anyone?

[Tyler123931]

If your using google chrome like me, no add-ons are needed just right click on the website, select view page source, and find the value you want to change that cwade shows and just double click. Chrome lets you edit the code on the fly so just input the value you want and your good to go.

[Koolbocks]

Hey, do you guys know how to hack a java application?

[scorchers18]

yo bro - i used fire bug, changed value to 1000, selected option 5, hit bote, and it took me back to HTS but it said ERROR: require_auth.. wtf?

[colloredbrothers]

@scorchers18

did you do basic 10? because you have to complete it before you can do realistic is what im geussing.

[CorvetteBG]

@scorchers18 Just log in on the left, you probably logged out accidentally or you changed browsers.

[Gunandrun100]

I did it with html:)

[rotsebanotman]

nice tut man, i love your hackthissite tuts! keepit up!

[PEAKTYMEZBLUD]

So if you did "Edit HTML..." and changed the value to 1000 how does it work out that it actually worked for the website? if you go to some amateur made website and "Edit HTML...", then refresh the site, it will not be what you changed it to. Then in the end, how is editing the HTML without anything actually staying the way you changed it, useful?

[PHGxCLOWN]

this is like a noob q but would this work for a site oh idk like ttg

[MugsM8]

@PHGxCLOWN

No and besides. It's illegal ;)

[MariaViridiana18]

hey i can't download the firebug, and if i do it can't be installed cuz supposedly aint compatible with the Firefox 6.0. Do you know where i can download it?

[Linux1man]

CS major here... You guys do know that doing stuff from "Hack this site" will not teach you shit, neither will it teach you how to "hack/crack" websites, right? It's just a waste of time for stupid people that believe it... If you really want to learn how to hack/program, get books on the following topics: C/C++, Perl, Python, MIPS/ARM assembly, (html, javascript you should already know), Networking (top to bottom approach) learn basic linux tools + linux (linux arch recommended), cya in 4 yrs.

[Kiwimcb96]

@Linux1man thanks, any specific books that would help or just books on those languages in general??

[Linux1man]

@Kiwimcb96

Good networking book is: "A Top-Down Approach by Computer Networking: A Top-Down Approach" - Kurose

Great hacking tools book: "Unix Power Tools" O'Reilly Series

The above assume you know how to program in at least one programming language... I would start by learning Java and eventually C. Learn Linux (start with ubuntu and work yourself up to Gentoo). When looking for a Java book make sure the book doesnt use an IDE (such as eclipse or BlueJ) and uses a simple command line...

[Linux1man]

@Kiwimcb96

After you feel comfortable with C/Java ans some scripting with perl, know a little javascript/html, then move on to hard stuff like assembly (start with MIPS or ARM then move to harder stuff like x86, etc... the registers and operators are similar...) Good luck

[Linux1man]

@Kiwimcb96

As far as programming books, any O'Relly book does a pretty good job... If you want to learn a simple language first (and move to Java/C later) learn something like Python (their website offers good tutorials)...

[gmtknns]

what are the "hackers" langauges. I mean like html and stuff. btw amazing videos

[cwade12c]

@gmtknns Perl is probably the biggest, but is overpowered now by Python. If you can accomplish the same outcome with the language of your chance, it means very little. I'd look for the most reliable approach rather than the fastest approach.

[gmtknns]

@cwade12c what do you mean by your last sentence?

[UnknownGenius16]

@gmtknns python, pearl, php, java, C/C++. and then assembly for low level exploits, and also html and javascript for website/network hacks. Possibly also ruby (for metasploit).

[justme20091]

i have a question your changements with firebug have only local consequence, it*s not effective for real sites ?

[N00bizme]

You know that if you just highlight something in firebug and type something in that will edit it right.

[ChadDeLange]

Hi thans for the Vid, is there any one else that is battaling to accsess hts recenty, for like over a month now cant get in and says My user name does not exsist, thanx GOD BLESS

[ether9]

To do this wo/ any 3rd party tools, just look at the form html - it's processed via GET variables by "v.php" - look at the form html to get your PHPSESSID, the band id is 3 we'll pass it 1000 votes. Replace your session id in this url - and v.php will do the rest:

/missions/realistic/1/v.php?PH­PSESSID=abcaeadfc31a5c43b2534b­f995c0553f&id=3&vote=1000

I determined the v.php structure just by looking at my browser history from a test vote. Cheers.

[xxVampirePuppyxx]

Man i love your videos they are awesome bro

[TheRiyad1]

what languages you suggest?

[TheRiyad1]

if you want to hack you should know python and HTML right?

[cwade12c]

@TheRiyad1 Knowing languages is useful, but knowing these two in particular won't get you where you are probably wanting to go. Python and HTML are by no means "hacker" languages.

[adamswise]

@cwade12c

So what are "hacker language"? What other basic tools should you have?

[adamswise]

So you can use firebug to alter webpages. Will the changes last? How common is it for a webpage to be alterable by something like firebug?

[DJDannyGrInGo]

@cwade12c I'm curently learning html and c++ what r ur recommendations ? BTW great vids!! and arent we technically crackers not hackers since we are breaking more than building?

[fremmenista]

If only I had known about the "change html" option... If I had known about that, I would have finished this yesterday on my own. but nooo. 2 extra clicks to finish this.

[sammyzeus]

Dude, is this legal? at all?

[fremmenista]

@sammyzeus the site? yup. completely legal. even says so on the site =P check it out. it's amazing.

[Ins4n3Guit4rist]

wow -____- take tht last comment back it turns out i had it but i wasnt logged in(dont even know how tht was possible) :'( woulda been the first mission i did on my own ... -.-

[Ins4n3Guit4rist]

ERROR:required_auth

[harmush]

you can also just use inspect element in safari on mac. that lets you do exactly the same thing as fire bug. pretty easy

[L1NDF1RE]

if i mess with my friends website with fire bug can they see it. i exited out and went back and it was all reset.

[daedalus357]

an easier way than clicking through the entire tree structure with firebug is to use firebug's "Inspect Element" which is included in the more recent editions of firebug. just simply right-click on the dropdown menu and select "Inspect Element". it will take you directly to the code for that specific element. Cheers- Daedalus

[doulikestawberrys]

any idea why firebug dosent work? (cant download)

[kidel3]

Finally you are using FireBug instead of yout stupid HTML documents!

[blaablaakas]

I couldnt do the basic 6-10 but I did this in 1min :D

[Obliviboy12]

@blaablaakas lol sames, not much javascript involved.. nice!

[MrKatal2hod]

cwade... you can actually download add ons directly to the firefox browser just go to >tools> add ons> then get add ons > search and finaly install ... hope it helps!!!!! ^_^

[xXxserenityxXx]

I freakin knew it was that straight away like two hours, my url redirect was wrong in my saved html doc. lol

[rerundadog]

yo guys heres somthing i just found out

In google "chrome" there is a "inspect element" built into it. Its the same as firefoxes firebug.

[arbitterr]

no shit

[Coastergeekperson04]

I tried modifying the webpage so his band was pasted to the top. Then I ran into a brick wall.

[SuperBang69]

it doesn't work.

it gives me an error message.

it says require_auth

[Kartten0]

@SuperBang69 just sign in same thing

happend to me. :)

[Juhi04]

but you won't learn shit with firebug

[compoundguy]

@Juhi04 firebug is one of the best web tools in your aresenal maybe the reason you dont learn is that you are just copying what you see people doing on youtube without trying to think the problem through yourself first?

[Juhi04]

I don't know where the hell you read that but actually you're right, neither just copying or using firebug will help on people's hacking/programming skills.

[compoundguy]

@Juhi04 what do you mean i read it i simply composed a slightly elequent response to your mokey comment of "you won't learn shit with firebug" to prove your point wrong and how firebug is a very usefull tool and instatly I must have plagerised it from some where? has it occoured to you that some people have the neccisary ability to form a scentance with an actual meaning designed to help? your other comment blew me away totaly with your ability to re-word what I said in my other comment

[Podrocketpwnage]

@compoundguy Your viewing this for the same reason as anyone.

[compoundguy]

@Podrocketpwnage hey man i was only trying to help juh04 understand why firebug is actualy a good tool and also FYI i am not actualy looking at the vid for the reason you think, ive completed this mission and i was mearly trying to view all the possible ways of completing it, either way it shouldnt matter and i wonder why you would care so much about a conversation that doesnt actualy envolve you?

[Podrocketpwnage]

@compoundguy Now that I know what firebug is, I see your point about how firebug is useful. I used Paros to complete this challenge, which is basically the same tool as firebug. Although, you shouldn't condemn people for trying to learn by watching this video, when you want to learn from this video as well. It's as simple as that. Any comments you post to continue this, I wont reply to, because I've wasted enough time arguing with people I don't know on Youtube. You know what I mean.

[TheKillasProductions]

@Juhi04 You're supposed to do the mission doing it with fire bug doesn't mean you haven't learned anything, You learned the same amount of hacking skills as everyone else... Just with firebug.

[coder928]

tamper data will work

[FunnyGreekBoy]

thanks for tutorial 1.. firebug is a very nice add for firefox. (:..

[XxPlay9xX]

if you havent got it, download it ^^

[failte182]

what do we do if we dont have firefox?

[imfase]

well that's just too easy: I could figure it out myself... that says something...

[tobias4545]

what have you for firefox ?? i don't have the same as u got i think cuz i doesn't got the temperated data thing... ofc i have at the swedish version but i can't find it anyways:(

[dikkenicky]

cuz its an add-on too, just like firebug, you add it to firefox...

[Wolf902]

Works for fire bug but tamper data don't work

[TheRedSoxAreAwesome]

Tamper Data will work...

[Wolf902]

I don't see how it will work

[EXTRA88PERFECT]

great site but this is not the place to start all over.

[MuhammadVonRaven]

If this mission were really realistic, you'd have to change the value back to 5 after voting, right? Otherwise, wouldn't the web admins pick it up?

[TheRedSoxAreAwesome]

Nope, the copy that Firebug edits is a local copy stored only on your computer. If it was this easy to change a website, the web would have a serious flaw in it (Most sites wouldn't allow this kind of hacking, since smart developers will check for valid values for each input).

[TwosComplement]

Wow, that fire bug thing is pretty cool

[LilBOBeight]

How did u get that cursor

[cottle9]

Couldnt tamper data and fire bug be use to get things cheap of the internet?

[evilbob0wns]

na, most websites have higher security values and are reviewed by people. Especially if they're selling something.

[TheRedSoxAreAwesome]

Sorry...most developers check for valid values before executing the data from a form.

[DanielJennex]

i jus downloaded opera is there any addons for opera that can do the same as firebug and tamper data?

[M4XD4B0ZZ]

ich habs auch mit firebug gemacht ;)

aber hey wie geht das mit tamper data? Kannst du mir das pls erklärn? wär echt nice^^

[hitohiranohanabira]

If it says "require_auth" it just means you need to log back into the site. It took me a minute to figure out, but that's it. This method still works.

[PANOS5656]

i really love your tutorials bu you ve fucked up with firefox you have to realise that there re some eole that do not have fireox

[cwade12c]

You're on the internet, download it, it's free.

[lalalalolnubed]

@cwade12c Hello, I started off this website using Chrome, and now when i try to go into firefox, when i try and log in with my correct username and password it says my password is incorrect. help?

[CaveofTwoLovers]

@cwade12c

i would except ive done something complicated to it so i cant use firefox... :/

[CaveofTwoLovers]

@cwade12c

i would except ive done something complicated to it so i cant use firefox... :/

i can do the same thing, it just a little more complicated for me, but not really hard. if somone wants to know ill post a comment on how to. (not gonna put up a video)

[airsoftwarrior247]

@cwade12c But most people (including me) do not realise the full potential of firefox and its addons, but I have a question which fire fox does tamperdata work on?

[vgalbin]

@PANOS5656 You can also do it with Safari.

[keithpetro]

@PANOS5656 Panopanopanopano.... Some things only firefox can do!

[chrimsilva]

@PANOS5656 at least u regognized u were an asshole

[BlaineCobban]

@PANOS5656 There's no need to be hostile. Learn to work with what you got. If you are using Internet Explorer, you can press F12 and that opens up a window called Developer Tools and you can do the same thing.

[PANOS5656]

@BlaineCobban lol just about a year later i have learned so much more, plus firefox is the best browser ever! omg, i was sooo dump..

sorry

[igotapochahontas]

your videos are the best explanations on the web.

keep up the good work man.

[sbogu06]

what should i do it says req_author to????

[IshYaBoyPimpen]

well i edit the value but with no success because it tells me same as miguelthemexican99 and says require_auth.

[frozenchillpill]

can you do it with internet explorer?

[BrigidaGoneStupid]

Tools>Developer Tools>???

IDK whats next but i can get where is the values of 1,2,3,4,5 of Raging Inferno

[merc174]

tamper data doesnt work, nothing appears thats changeable

[DylanLFS]

The new one is terrible, he's using the old one.

[theabyscalls]

as soon as he said firebug i was like oh of course!!!!!! and did it myself. i was trying to do it another way that should have work but for some reason it wouldnt ty man

[miguelthemexican99]

when i used firefox to change it to 1000, i voted then it said require_auth.

[EazyMixes]

Lol I guset this add on lets you fk around with other people's websites

[J003S3PH]

can u do this with internet explorer?

[moosemouse2]

lol...

What i did was:

I used the "Inspect element" item on the right click menu in google chrome.

then i put

javascript:void(document.cooki­e="Authorized=yes")

into the URL box. But these ways work too.

[DarkDant3]

WHERE DID YOU GET THAT CURSOR ???

i've been searching my ass off trying to find a cursor like that !!!!

LEMME KNOW WHERE YOU GOT IT !!!!

[poppycritch]

its from hypercam, when your recording you can turn it on -_-

[DarkDant3]

baaah , can u keep it always like that ?

[Mordiacr]

Camtasia studio makes your cursor like that so that it will be easier for people to notice the cursor.

[Smt923]

The cursor is built in with his recording software.

[bem18bem]

you could also do a simple php hack, by changing the values in the url

[theusedcomputers]

but my firefox does not have firebug or tamper data so what do i do???

[themanfromthehouse]

download them

[HollowSunny69]

search up firefox addon in google :D

[fireyblackdragon]

yeah, i set it to 500000000000 just kept hitting 0 a whole bunch of times... i think they got to the top XD

[waring1414]

man your tha best

[cwade12c]

Much appreciated. :)

[elvislover718]

i try that and i get an error code saying authorization is erquired... i do i authorize myself? do i have to save whatever i did on firebug?

[NoShit1005]

Could you tell me what addons you use ? like that fire-bug or what you call it. ty

[themanfromthehouse]

firebug and tamper data

[Netinterspace]

Is it impossible on IE?

[Matthtz]

This might seem stupid but aren't we the only ones to see that the band is number one in the top?!

Okay it is what HackThisSite asks us to do but as it is "realistic missions" how do we show the other guy this?!

[AEonBlue23]

Much easier way if you just take a look at the html and work with the sub-directories..

[johnny45irish]

got any good videos of paint drying my friend.

[earthtoeric]

i sense a disturbance in the force

[johnny45irish]

lol.

[johnny45irish]

patience Luke.

[Luukske13]

thanks man :D

[hellow533]

damn im at aprentice now w00t!

[darkgearz]

how do u do this mission with tamper data?

[mapumac]

lo, use tamperdate alot

[narutiza375]

dude you fuck around way too much

[OlloX3]

press on window key and U, cwade to use a better screen zoomer..

[CapitalJoe101]

boss

[pkwithobby]

would this work for other websites?

[cwade12c]

If they have the same vulnerability, sure!

[sephirothsoul999]

Excellent work, as always C. Much Appreciated :)

[cwade12c]

Thx much my friend,.

[stuntmanxp]

how do i get tamper data?

[cwade12c]

You should get Firebug, but for Tamper Data just google: "Tamper Data Firefox Addon"