Jump to content


Photo
- - - - -

I want in


  • This topic is locked This topic is locked
11 replies to this topic

#1 working on this

working on this

    mad 1337

  • Members
  • 143 posts

Posted 09 April 2007 - 01:16 PM

As you all know im retard at hacking/programing, but you are not. So i want you help to get into this site(if its possible).

here is part of the script were the password is............

<br />&lt;script language='JavaScript' type="text/javascript">
<!--
function ValidateForm() {
var Check = 0;
if (document.LOGIN.UserName.value == '') { Check = 1; }
if (document.LOGIN.PassWord.value == '') { Check = 1; }

if (Check == 1) {
alert("Please enter your name and password before continuing");
return false;
} else {
document.LOGIN.submit.disabled = true;
return true;
}
}
//-->
</script>
You must already have registered for an account before you can log in.<br />If you do not have an account, you may register by clicking the 'register' link near the top of the screen
<br />
<br />


You should know there is no maliciouse intent here at all!!!! I want to find out some information from this site, that is all.

EDIT: here is the actual site http://s12.invisionf...com/ImperioUMA/

Edited by working on this, 09 April 2007 - 01:17 PM.


#2 Ohm

Ohm

    I could have written a book with all of these posts

  • Members
  • 3,209 posts
  • Gender:Male
  • Location:Maine, USA

Posted 09 April 2007 - 01:32 PM

Sites that do form validation in javascript sometimes fail to do input validation at the server because they think the data is safe. You can take these limitations off and try to see if you can force feed some data that'll produce unexpected results. To do that, you can either make your own form page (an html file on your machine is fine), or use my favorite Firefox extension called Firebug. Firebug will let you edit the site to take the validations out and let you play around. Go check out firebug ;)

#3 working on this

working on this

    mad 1337

  • Members
  • 143 posts

Posted 09 April 2007 - 01:38 PM

Iv not got firefox on this computer :(

#4 Ohm

Ohm

    I could have written a book with all of these posts

  • Members
  • 3,209 posts
  • Gender:Male
  • Location:Maine, USA

Posted 09 April 2007 - 02:09 PM

Hmm.. it's really the best tool for poking around with this. No worries, you can still write an HTML file, right? All you need for that is notepad.

#5 working on this

working on this

    mad 1337

  • Members
  • 143 posts

Posted 09 April 2007 - 02:14 PM

I got that!!!! But im not too good

#6 livinded

livinded

    Dangerous free thinker

  • Agents of the Revolution
  • 1,942 posts
  • Location:~/

Posted 09 April 2007 - 03:04 PM

Then learn html and how the system works rather than just saying you want to get in. This small snippet of code has nothing to do with the actual login. Looking at the url I assume this is a forum powered by ipb. While there have been security flaws in ipb, it is a fairly well written forum. Good luck finding an easily exploitable hole that will give you access.

#7 BigBrother

BigBrother

    Hakker addict

  • Members
  • 524 posts
  • Location:36° 12' N 95° 54' W

Posted 09 April 2007 - 03:22 PM

Register. They would let you in then.

#8 R3c0n

R3c0n

    SUPR3M3 31337 Mack Daddy P1MP

  • Members
  • 411 posts
  • Location:Daytona, Florida

Posted 09 April 2007 - 05:42 PM

I got that!!!! But im not too good



WTF ?

Learn?

Will take you less than 20 mins to learn most of it.

#9 working on this

working on this

    mad 1337

  • Members
  • 143 posts

Posted 10 April 2007 - 05:34 AM

Register. They would let you in then.


All those who play Ogame will understand this

they wont let me register because im not part od their allience, so i was gonna get in find out alot of their infomation(members / planets rez/ raid plans etc) then use it with my allience so we can attack them. I could also use the info and "sell" it to other players aswell for alot.

#10 P(?)NYB(?)Y

P(?)NYB(?)Y

    bellcore

  • Members
  • 800 posts
  • Gender:Male
  • Location:BLackburn-5

Posted 10 April 2007 - 06:28 AM

So, what you're telling us so far is:

A. you want help illegally "breaking in" to a forum
B. you have "no malicious intent", though you intend to gather information to give you an unfair advantage over other players of some game
C. you are too lazy to actually learn how to write html
And (although you didn't actually say this, just an observation...)
D. you used one of the quotes used during the classroom scene in the movie hackers because you thought it would make you look cool. His name is Ozzy, not Ossy.

Cheating at a video game is not what hacking is all about. Hacking would be actually learning how to write the html and learn how this login system works. Instead, you only say that you are "no good". nobody here is going to write your 1337 break in script, so don't bother.

and for the record:

3. DEFINITION OF "HACKING"
Hacking is about production, not destruction; it involves curiosity, research, analysis, knowledge, the creation of new ideas, the discovery of amazing breakthroughs, and the sharing of information with those who will use it responsibly. Hacking is not illegal activity. The Digital Dawg Pound and the Binary Revolution Forums will not take any responsibility for your actions, nor do we condone any sort of illegal activity, especially in the name of hacking.



#11 WhatChout

WhatChout

    Dangerous free thinker

  • Members
  • 814 posts

Posted 10 April 2007 - 11:02 AM

Ogame sucks anyway.

#12 P(?)NYB(?)Y

P(?)NYB(?)Y

    bellcore

  • Members
  • 800 posts
  • Gender:Male
  • Location:BLackburn-5

Posted 10 April 2007 - 11:49 AM

oh, right, forgot this part...

topic closed.




BinRev is hosted by the great people at Lunarpages!