+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: Plaintext Passwords on a MyBB forum to .txt file! (/showthread.php?tid=5653882)
Plaintext Passwords on a MyBB forum to .txt file! - SupremeF - Jun 23, 2017
Is there any way to do this please?
* - vorticalbox - Jun 23, 2017
Mybb will use some sort of hashing to store it's passwords, you could get the hash and try crack them but you'll never get a plain text password.
* - SupremeF - Jun 28, 2017
There must be some other way.
* - vorticalbox - Jun 28, 2017
(Jun 28, 2017 02:11 AM)SupremeF Wrote: There must be some other way.
You could use XSS to steal a cookie, or trick a user into putting the login information into a fake website that looks likes the forum, target malware to users, create a Python script to try a word list against accounts.
You're not getting plain text passwords form a database.
* - Tommy Chong- - Jun 28, 2017
If you actually got access to the files on the webserver (Wich means you already hacked it) you could write a piece of code wich will put the user:pass to a txt file everytime a user logs in
* - Drug Problems - Jun 28, 2017
If you're admin of the MyBB forum you can remove the encryption if you know the proper coding
If you're trying to hack accounts on a random MyBB forum you'd have to find an exploit in the database (most likely would be encrypted) or infect/trick your target
* - Mayweather - Jun 28, 2017
Done this before, just gotta write a a couple lines of PHP to output all user input in the Login page to a txt file or mail. This would only in fact work if you have access to the files.
* - Tommy Chong- - Jun 28, 2017
(Jun 28, 2017 10:28 PM)ghana Wrote: Done this before, just gotta write a a couple lines of PHP to output all user input in the Login page to a txt file or mail. This would only in fact work if you have access to the files.
Amazing job repeating my post