Hack This Site - Realistic 8 Tutorial

HackThisSite Realistic mission 8 tutorial.

Method: Cookie Spoofing

Injection used in video:

Theory: RatDance

Enjoy,
-cwade12c

Category:

Howto & Style

Tags:

• hack
• this
• site
• realistic
• mission
• eight
• tutorial
• cookie
• spoofing
• javascript
• injection
• wade
• 12
• cwade12c

[masterchief156111]

Could someone send me the precoded javacsript injection?

[cwade12c]

@masterchief156111 Why would somebody do that? Don't you want to learn?

[mrhpe]

cain i translate ur vidz to spanish?

[cwade12c]

That'd be cool! Go for it.

[NoneVozd]

I don't have cookies on firebug!!!

[cwade12c]

Get: FireCookie

[cnslpsbly]

WOW!!!! you did it so complicated!. i just enter my own account, edited the value of the cookie accountusername, then i moved the money (from my account with the edited cookie), when that worked i returned to my account and changed the value of the button "clear files in personal account" from my account name to "logFiles" and ta-da. i didn't use javascript injection at all!.

but i guess we can do it in different ways hehe.

Nice tut anyway!

[wex313]

hey cwade12c where did u learn how to hack?

[paulopavacic]

my firefox keep crashing :(

[paulopavacic]

my firefox doent react on javascript

[Donkeyer93]

too bad you didn't explain the javascript injections, this just solves it, I wanted to learn how to do it... guess I'll look somewhere else.

thanks for the other vids for HTS though, they've been a great help:D

[nyrimatos]

good video and how did you know that you can inyection javascript? and why when i put javascript:alert(document.cook­ie);? it return me error this error :

uncaught exception: ReferenceError: alert is not defined

and for you not what should i do active something? can you help me?

[TimoKick]

That's not to say there is no problem with the cookies... obviously a site should not store passwords in plain text in cookies, neither should it assume that the value of a cookie is safe and that the value of a cookie can be depended on to actually auto-login :D

[VideoVerifying]

if you have the password and username why dont you just login as garywilliam and then transfer the money and clear log, then go to the dropcash account and clean log, so you dont need java