+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Beginner Hacking (https://hackforums.net/forumdisplay.php?fid=4)
+---- Thread: How do you create a sentrymba config when it sends a password hash instead of plain? (/showthread.php?tid=5682799)
How do you create a sentrymba config when it sends a password hash instead of plain? - httpsex - Jul 30, 2017
I actually have a couple sentrymba questions, if anyone has any good detailed guides on sentrymba config creation (beyond hurr durr hit analyze) becuase i have yet to find one.
So there's a site that sends the following form data
passhash:bf9a42e961d4a18008784cbbafa7178547872062
salt:742ebc25ccd8065da47e66807c167263
imapuser:[email protected]
Both the hash and the salt change every login, so i assume it generates the password hash with a unique salt on the client side each time.
How would I program this into sentrymba? Because it's not just sending password, it's sending the hash of the password with a custom and dynamic salt.
Another side question: Does selecting "Refresh Data" in the post request settings mean that it disregards what you type in the data to post tab?
Imagine the analyze automatic function gives me this post data
setting=1&randa=fdjsfhdfd&randb=bibuivbui
randa and randb change every refresh, so that data must be refreshed. But imagine i need to set "setting" to 1, so i would want it to post
setting=0&randa=[random]&randb=[random]
So i need randa and randb to refresh but i need setting=0 to stay constant, selecting "refresh data" will make it
setting=0&randa=[random]&randb=[random]
Correct? Is there a way to only refresh only particular form fields?
Thank you for your answers.