+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: How to find the hole? (/showthread.php?tid=3544037)
How to find the hole? - dkhax0r - Jun 11, 2013
Hello i want to find a hole in a game i play. It's about a in-game cash bug, so i can buy the item to a lower price then others and then become rich. But i can past the html code in here? :S
<td rowspan="2" valign="top" width="90" align="center"><img src="http://hhsrv.n.dk/chat/gfx/shops/furniture/006_50er/50er_barstol.gif" border="0"></td><td>
</td><td valign="top"><b>50er Barstol</b> <br>
<div style="margin-right:10px">
<br><br>
Pris: <b>70 Monetter</b><br>
På lager: 24<br>
Level krav: <span id="holder_ctl00_LevelReq">15</span><br>
<br>
<span id="holder_ctl00_NotEnoughCredits" style="color:Red;display:none;">Du har ikke monetter nok<br><br></span>
<span id="holder_ctl00_UniqueItemViolation" style="color:Red;display:none;">Du må kun have én af dem<br><br></span>
<span id="holder_ctl00_ItemSoldOut" style="color:Red;display:none;">Dette produkt er udsolgt<br><br></span>
<span id="holder_ctl00_LevelRequirementError" style="color:Red;display:none;">Du er for lav level til at købe dette produkt<br><br></span>
..
How to inset the whole html? So you guys and girls can see it and then help me with find the hole in the system?
* - VipVince - Jun 11, 2013
That is just HTML, you may need to get tamper data and edit the variable data to your preference.
* - dkhax0r - Jun 11, 2013
Can i send the html file to you just with copy paste?
* - communix - Jun 11, 2013
you wont find a hole in the html
(besides xss but they are useless if you dont know how to handle them)
you would have to get the php (server side ) code to find holes.
however your best bet is fuzzing, finding bugs this way and see if you can turn those bugs into exploits.