+- Hack Forums (https://hackforums.net)
+-- Forum: Tech (https://hackforums.net/forumdisplay.php?fid=444)
+--- Forum: Webmasters (https://hackforums.net/forumdisplay.php?fid=141)
+---- Forum: Website Construction (https://hackforums.net/forumdisplay.php?fid=50)
+---- Thread: Vanilla Forums Plain Text Password (/showthread.php?tid=5763615)
Vanilla Forums Plain Text Password - Keat - Dec 6, 2017
Anyone know how to edit Vanilla forums to capture the user:password in plain text and log to a file when someone logs in?
RE: Vanilla Forums Plain Text Password - Malicious` - Dec 6, 2017
You'll have to edit some code for this. It won't be very easy though afaik. I don't have much experience with Vanilla forums and their hashing, but some research learnt me it used phpass just like PHPBB3 for example. I couldn't find much about it though.
Some links that may be useful, hope these help you.
http://www.openwall.com/phpass/
https://github.com/vanilla/vanilla/search?q=hash&type=Code
RE: Vanilla Forums Plain Text Password - Keat - Dec 12, 2017
(Dec 6, 2017 12:54 PM)Malicious22 Wrote: You'll have to edit some code for this. It won't be very easy though afaik. I don't have much experience with Vanilla forums and their hashing, but some research learnt me it used phpass just like PHPBB3 for example. I couldn't find much about it though.
Some links that may be useful, hope these help you.
http://www.openwall.com/phpass/
https://github.com/vanilla/vanilla/search?q=hash&type=Code
Yeah that is what I came across. I am now just going to try to crack these. But in the dump I am getting this..
TWSIF0Y0GEZAVVT67KN8OXM28462KKZCOG8RLH87B7C1SG9ZEI
As the password.
RE: Vanilla Forums Plain Text Password - /dev/net/tun - Jan 21, 2018
At a glance:
.user.ini: auto_prepend_file = malicious_script.php
malicious_script.php: read post values "Email", "Password" if existent, write to file.
RE: Vanilla Forums Plain Text Password - Vyxn - Jan 21, 2018
Capture the clean password before it was saved on different format.