![]() |
|
Ub3r exploit possible? - Printable Version +- Hack Forums (https://hackforums.net) +-- Forum: Hack Forums Official Information (https://hackforums.net/forumdisplay.php?fid=1) +--- Forum: Site News (https://hackforums.net/forumdisplay.php?fid=2) +--- Thread: Ub3r exploit possible? (/showthread.php?tid=5369060) |
Ub3r exploit possible? - Egregious Jr. - Aug 9, 2016 I was thinking about this the other day, and I was wondering if this could be possible? This sounds really stupid, but just listen. I'm not approved for ub3r. I went to the ub3r upgrade page and noticed the URL: https://hackforums.net/upgrade.php?action=upgrade&level=2&my_post_key=5f4b952988a3ff5e37fc1456eaf1f736 Notice it ends with: &my_post_key=Xxxxxxxxxxxxxxxxxxxxxxxxxxxxx I just thought about it, what if you swapped your post key with a member who was approved? Would it work? Probably not. Just wondering about this, it sparked my mind. * - Duelyst - Aug 9, 2016 How would one acquire such key? * - Raleway - Aug 9, 2016 It would've been smart to message this to omni directly rather than posting it here, but I'm sure it's more sophisticated than that or else it would've been exploited years ago. * - Egregious Jr. - Aug 9, 2016 (Aug 9, 2016 10:13 AM)AυтнєηтιcƑX Wrote: It would've been smart to message this to omni directly rather than posting it here, but I'm sure it's more sophisticated than that or else it would've been exploited years ago.That's what I was thinking, it couldn't be possible. * - webdev77 - Aug 9, 2016 "Authorization code mismatch. Are you accessing this function correctly? Please go back and try again." Not going to work. * - TyrantKingBen - Aug 9, 2016 "Authorization code mismatch. Are you accessing this function correctly? Please go back and try again." * - Meow - Aug 9, 2016 Try it and you will see that it doesn't work. * - Egregious Jr. - Aug 9, 2016 (Aug 9, 2016 10:16 AM)TyrantKingBen Wrote: "Authorization code mismatch. Are you accessing this function correctly? Please go back and try again."Okay, closing. * - Omniscient - Aug 9, 2016 1. No. 2. Don't give out your post key. It's relatively benign but still, don't do it. |