Page 1 of 1

hacking this game site

Posted: Wed Nov 14, 2012 10:08 pm
by ty111
Can someone help me bypass the log in screen on this site? and get some emails and passwords?
http://www.callofroma.com/index.do

Re: hacking this game site

Posted: Thu Nov 15, 2012 12:24 am
by Sethioz
MOVED - wrong place, this is not exactly game hacking, it is website hacking.

you can't bypass login screen, you need to do research on how websites work and exploit them.
i can't bother hacking into it myself, i can only give suggestions what to try.

first scan the website with some vulnerability scanners to get general idea what's going on (acunetix is good, but there are others, just google).
then you might want to capture some packets during login (who knows, some websites might have extremely low security during login).
cookie stealer might work, steal some admin's cookie and you can "login" as admin
it seems like they use custom website system, so i doubt there are any public exploits for it, but you can always do research, maybe it only seems like its custom system.
download whole website (website downloader might work) and research the site. it won't obviously download config files and scripts, because they cannot be seen from web side, but it will get general structure and might give you some ideas how it works.

XSS (cross site scripting) and SQL Injection might also work.