+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: Password Transmitted Over HTTP (/showthread.php?tid=3542245)
Password Transmitted Over HTTP - Acidfall - Jun 10, 2013
How would I get the password if they're transmitted over http?
This is what NetSparker is giving me
Confirmation: Confirmed
Vulnerable URL: http://perrylocal.org/wp-admin.php
Vulnerable Classifications: PCI 6.5.9 OWASP A9 CWE-311 319
From Target Location: http://perrylocal.org/wp-login.php
I'm getting 10 Important Variations coming from this too, I just don't know how to get the passwords.
* - zezo2013 - Jun 10, 2013
What is that for ?
Video/More information please !
* - Acidfall - Jun 10, 2013
I'm trying to get into a Website, and the website obviously has some vulnerabilities. I just didn't understand what it meant when it said that the passwords were transmitted through HTTP.
* - 21redallday12 - Jun 10, 2013
Learn how to hack, instead of using auto scanners, i don't waste my time help people who use auto scanners
* - Acidfall - Jun 10, 2013
I've tried HydraGTK and WPscan, just trying to find more Vulnerabilities, and if you don't waste your time with people like me, why did you even reply?
* - Shibe - Jun 10, 2013
Try finding what plugins they run and attack them (if they have any)
* - ThatGoatherd - Jun 11, 2013
(Jun 10, 2013 06:23 PM)Acidfall Wrote: I'm trying to get into a Website, and the website obviously has some vulnerabilities. I just didn't understand what it meant when it said that the passwords were transmitted through HTTP.
I think it means that the login wasn't conducted over a HTTPS connection so is shown in plain text format. Only really useful for sniffing over a local network though and nothing remotely exploitable.