Thread subject: Security Override :: Challenge - Basic Level 9

Posted by LostLord on 01/14/2011 15:25:21
#1

hi my dear friends :
would u plz lead me to a regular way for solving this challenge!

i checked fusion_visited cookie - but it seems there is nothing in there...

best regards

Posted by eeriol on 01/14/2011 15:55:19
#2

this will hopfully help: it is not only the fortune cookies that hide stuff :P

Posted by LostLord on 01/14/2011 16:19:22
#3

i could not understand...
should i check another cookie?
it should be about cookies...
am i currect?

Posted by eeriol on 01/14/2011 16:24:40
#4

yeas that is correct, try to use tamper data and try to understand the cookie and when you know what tamper data does and understands what the diffrent things in the cookie means it will be too easy and you are probably allready overthinking.

/eeriol

Posted by LostLord on 01/14/2011 16:43:20
#5

thanks a lot , solved

Posted by eeriol on 01/14/2011 17:50:18
#6

youre welcome :D

Posted by jaatrox on 02/20/2013 08:09:35
#7

you should check all the cookie the server has send to u good luck:)

Posted by Guest on 02/22/2013 12:52:57
#8

jaatrox, its nice that you try to help users, but this thread is years old. pay attention to the date next time please

Posted by CrawlingHawk on 08/09/2013 12:57:11
#9

Thanks Guys, Got It

Posted by mpour on 12/05/2013 11:10:40
#10

ii can not find out the solution.
i compared cookies i saw this:

normal cookie:
-----------------
Cookie: fusion_visited=yes;
PHPSESSID=846014f3286ae3529830901afd893d2a;
fusion_user=12894.b8a896d5826ef69b3746a694a09f844a;
fusion_lastvisit=1386255219

cookie when i log in:
-------------------------
Cookie: access=no;
domain=new;
fusion_visited=yes;
PHPSESSID=846014f3286ae3529830901afd893d2a;
fusion_user=12894.b8a896d5826ef69b3746a694a09f844a;
fusion_lastvisit=1386255219

CSRF_TOKEN=%3C%3Fphp+echo+%24_SESSION%5B%27CSRF_TOKEN%27%5D%3B%3F%3E&uname=Admin&password=gg

Posted by fr0x on 12/06/2013 03:41:17
#11

Have a closer look at the cookie when i log in,
Are u really able to utilize its contents.
Do the needful changes, and you'll succeed.