Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact

Password Transmitted Over HTTP

How would I get the password if they're transmitted over http?

This is what NetSparker is giving me

Confirmation: Confirmed
Vulnerable URL: http://perrylocal.org/wp-admin.php
Vulnerable Classifications: PCI 6.5.9 OWASP A9 CWE-311 319
From Target Location: http://perrylocal.org/wp-login.php

I'm getting 10 Important Variations coming from this too, I just don't know how to get the passwords.
What is that for ?
Video/More information please !
I'm trying to get into a Website, and the website obviously has some vulnerabilities. I just didn't understand what it meant when it said that the passwords were transmitted through HTTP.
Learn how to hack, instead of using auto scanners, i don't waste my time help people who use auto scanners
I've tried HydraGTK and WPscan, just trying to find more Vulnerabilities, and if you don't waste your time with people like me, why did you even reply?
Try finding what plugins they run and attack them (if they have any)
(Jun 10, 2013 06:23 PM)Acidfall Wrote:  I'm trying to get into a Website, and the website obviously has some vulnerabilities. I just didn't understand what it meant when it said that the passwords were transmitted through HTTP.

I think it means that the login wasn't conducted over a HTTPS connection so is shown in plain text format. Only really useful for sniffing over a local network though and nothing remotely exploitable.


Possibly Related Threads...
Thread / Author Replies Views Last Post
by z3r0x1Apr 3, 2017 11:56 AM 0 117 Apr 3, 2017 11:56 AM
Last Post: z3r0x1
by t3esApr 8, 2010 12:49 AM 6 184 Apr 8, 2010 12:49 AM
Last Post: Tladi