Hi
I want to get into the Moderators lounge in this site www.forumw.org

I tried this when i was asked to input username and password:

javascript:void(document.cookie="username=hello"); javascript:void(document.cookie)="password=world"; javascript:void(document.cookie="authorisation=Tru e");javascript:void(document.cookie="*****=True")j avascript:alert(document.cookie)

as a javascript injection, please don't laugh i am new. SOmething must be happening as if i don't put this in and just randomly press buttons in username and password it comes up with "this user doesn't exist" when I type in my injection which my user would be hello and password is world it comes up have you forgotten your password.


Can anyone tell me how to get into this, I wouldn't be doing any damage?

hmmmmm, not sure if this has any effect as to the outcome, but there is a space in the second script, "authorisation=Tru e" , I'm not sure if that was a typo when you posted, or if that was there when you tried the injection, or if it even matters (which i think it does), but another thing....why do you have "Hello World" as part of the script? that seems a little odd to me. try that again. wait.....how exactly is that going to work? are you hoping to get into a master account or get a master database list? seriously.

I just want to get into the moderator section, you need to have a moderator account.

no shit. akbgjke

i so wanna learn that "hacking webpages" shit..lol I know how to make a webpage...i just cant hack them!! lol...

dude hacking web pages, depending on the website, is easy!

You just have to get a feel as to how the security of the database is and how it is setup. most are similar, but you cant be sure until you actually start learning about them, and making successful injections. Just read-up on ur shit.

I will man. My mate took my to some how2hake.com (or org or net...i dont remember) and we aced it to the flash hacking....i dunno if its real hacking, but is right clicking and veiwing the source and getting a password hacking? lol.

uhhhhhhhh, no. Thats just exploiting someones stupidity. Really hacking is going into a Wallmart MySQL database and getting 100,000 customers credit card numbers. Just looking for a possible password, or vulnerable script are not hacking by themselves. I dont know....just try to get familiar with how things work and how they are coded.

hey can u do that walmart thingy that would be fucking awsome