return to tranceaddict TranceAddict Forums Archive > Main Forums > Chill Out Room

 
tranceaddict hackable ? FAO TA Admin.
View this Thread in Original format
DJ RozzeR
I was not sure where to post this information on the forums but, I have been playing around with the site to look for its week points, don't worry i ain't done anything but I have seen a big hole in your security on the Forums. take a look at this

Edited by Blik
AndiH
wow...you seem to be a |33t hacker :rolleyes:

vbulletin cannot be hacked the way you described it...(feel free to hack my account...:p)
Blik
PM Swamper and don't post it in public on the board dude, I thought you would be smarter than that!!

closed
Swamper
Well Blik told me what you said.

Here's some insight:

The s=xxxxxxxxxxxxxxxxxx session ID that is present in the URL links your IP, browser version/type, and time into an algorithm and pumps out that string - now in order for you to see or access something someone else is seeing you have to have that session ID and match all of the other variables.

You're not a hacker m8, don't waste your time on here, I do network security in my spare time... :D

besides, even if you did find a real exploit there are ways to report it - www.vbulletin.com for one, or feedback/PM to me

What you did is sort of like putting a sign on somebody's lawn saying that they left their keys in their front door but you're not sure if it's the right key but you just wanted to let them know. (i.e. putting a message in their mailbox would've sufficed)
CLICK TO RETURN TO TOP OF PAGE
 
Privacy Statement