hacker problems

do you know anything about websites. i was playing this game online and i got one of my accounts hacked. i talked to one of the guys that had worked on the website and he said that he had a way to find out passwords and all the other links on the page. he said he really didnt want to give out this info. he did say though that if i wanted to i should go right-clcik, properties, well this is what he said. so if you know anything about this i would sure apprciate if you could shed some light on this.

If you right click on the page, and click view page info/Properties, you can see every link in the website accessible to the public.
Ka0h says:
um...website security.
Ka0h says:
+ it helps being a programmer to understand the programming.
Ka0h says:
for instance how i can talk as you through the ghetoo chat and not be logged in as you.
Ka0h says:
or logged in at all.
If you want to learn more about website exploitation, goto Anticode.com.

I am very interested in this stuff and would like to find out more. Please reply, i would really appreciate it.

lol either i'm drunker then what i thought i was, or this thread just doesn't make any sense...

anyhow link to above mentioned website? i think that the person is pulling your leg, or if indeed he/she can do as they state then either the website is outdated and using old software, or he/she is just using an xss type attack to get user priveledges and doing it that way.

cheers
acidtone..:drink:

Quote:

---

i talked to one of the guys that had worked on the website and he said that he had a way to find out passwords and all the other links on the page.

---

Yea he right clicked, and view the 'source code'. :D

You mean they're using a clientside login ? Then they got what they deserved.

no the r cheating and cheating others. they r still on it using the others profiles now.

What's the site in question?

Who is Ka0H, and how are they involved in this?

kaoh is the one that can do it. the site is ghetoo.com .

Looks like they don't encrypt the password?:rolleyes:

AO use vBulletin which uses this:

http://pajhome.org.uk/crypt/md5/

can u explain this in a little detail. i dont understand any of this.

Sorry, I don't do games, so I have no idea of how those forums are designed; besides, this isn't really the medium for detailed explanations. Suffice it to say that your site does not seem to use encryption so your password isn't secure in transit.

You might register on this site and browse around. It specialises in games development so just try searching for "security", "logons" and stuff like that:

http://www.gamedev.net/

It doesn't look like a client side login.

You can still guess the password from an md5 hash.

I also really doubt they're sniffing the auth info for his account off the wire.

proboller86 > The most likely explanation for your problem are:

1) Your authentication information (username, password, security question) were probably of a low quality and easy to guess or brute force.

2) The website has vulnerabilities and is open to a cross site scripting attack. With this type of attack knucklehead 'a' submits client side code that is pushed through the system to person 'b' and is executed by b's client to grab the authentication information and send it to 'a'. This 'could' be why they were trying to get you to right click and view source (if that is indeed what they were attempting). Doing so might have allowed you to see their scripts in the html.

You have to understand however that most people on sites such as www.ghetoo.com that are claiming to be evil hax0rs are actually just goobs that know just enough to prey on the fears of those who know less than themselves. It makes their e-peen bigger or something.

If you want a better understanding I recommend doing some reading on how the web and web applications work. Maybe learn to do a little code.

I work on games as well as security. Feel free to ping me with questions.

It's not. I just asked if it was above because someone else said "they peeked at the source code".

Quote:

---

Originally Posted by proboller86

can u explain this in a little detail. i dont understand any of this.

---

http://www.amazon.com/Hacking-Dummie.../dp/076455784X