Forced Profiles

EvercookiesSQL injection with raw MD5 hashes

gizmore

Global Rank: 198

Totalscore: 110647

Posts: 1795

Thanks: 1390

UpVotes: 961

Registered: 18y 258d

Last Seen: 64d 22h

The User is Offline

Send EMail to gizmore

Forced Profiles
Sep 26, 2010 - 18:32:09 (16y 38d) Google/translate1Thank You!3Good Post!0Bad Post! link

Recently i stumbled upon a funny "hack".

A guy on twitter.com has created an account named "userdoesntexist".

The result is that some searches with no match will redirect you to his twitter profile: http://twitter.com/userdoesntexist

I think that`s a very funny hack and worth to share.

The same "weakness" might exist on plenty of sites, at least
WeChall4 is totally vulnerable.

Happy Challenging!

The geeks shall inherit the properties and methods of object earth.

shadum

Global Rank: 76

Totalscore: 227334

Posts: 245

Thanks: 420

UpVotes: 281

Registered: 17y 309d

Last Seen: 2y 106d

The User is Offline

RE: Forced Profiles
Sep 26, 2010 - 19:13:22 (16y 38d) Google/translate2Thank You!1Good Post!0Bad Post! link

haha !!! That's brilliant.

quangntenemy, TheHiveMind, Z, balicocat, Ge0, arraez, jcquinterov, hophuocthinh, alfamen2, burhanudinn123, Ben_Dover, stephanduran89, braddie0, fpombal, csuquvq have subscribed to this thread and receive emails on new posts.
1 people are watching the thread at the moment.
This thread has been viewed 4602 times.

PHP Fatal Error(1): Constant E_STRICT is deprecated since 8.4, the error level was removed in www/protected/config.php line 6

Backtrace starts in [unknown file] line ?. GWF_Debug::shutdown_function() core/inc/util/GWF_Debug.php line 109. GWF_Debug::error_handler().... core/inc/util/GWF_Debug.php line 180.