hacker problems

[proboller86]

do you know anything about websites. i was playing this game online and i got one of my accounts hacked. i talked to one of the guys that had worked on the website and he said that he had a way to find out passwords and all the other links on the page. he said he really didnt want to give out this info. he did say though that if i wanted to i should go right-clcik, properties, well this is what he said. so if you know anything about this i would sure apprciate if you could shed some light on this.

If you right click on the page, and click view page info/Properties, you can see every link in the website accessible to the public.
Ka0h says:
um...website security.
Ka0h says:
+ it helps being a programmer to understand the programming.
Ka0h says:
for instance how i can talk as you through the ghetoo chat and not be logged in as you.
Ka0h says:
or logged in at all.
If you want to learn more about website exploitation, goto Anticode.com.

I am very interested in this stuff and would like to find out more. Please reply, i would really appreciate it.

[acidtone]

lol either i'm drunker then what i thought i was, or this thread just doesn't make any sense...

anyhow link to above mentioned website? i think that the person is pulling your leg, or if indeed he/she can do as they state then either the website is outdated and using old software, or he/she is just using an xss type attack to get user priveledges and doing it that way.

cheers
acidtone..

[Computernerd22]

i talked to one of the guys that had worked on the website and he said that he had a way to find out passwords and all the other links on the page.

Yea he right clicked, and view the 'source code'.

[JPnyc]

You mean they're using a clientside login ? Then they got what they deserved.

[proboller86]

no the r cheating and cheating others. they r still on it using the others profiles now.

[nihil]

Who is Ka0H, and how are they involved in this?

[JPnyc]

What's the site in question?

[proboller86]

kaoh is the one that can do it. the site is ghetoo.com .

[nihil]

Looks like they don't encrypt the password?

AO use vBulletin which uses this:

http://pajhome.org.uk/crypt/md5/

[proboller86]

can u explain this in a little detail. i dont understand any of this.