[Keat]

Anyone know how to edit Vanilla forums to capture the user:password in plain text and log to a file when someone logs in?

[Malicious`]

You'll have to edit some code for this. It won't be very easy though afaik. I don't have much experience with Vanilla forums and their hashing, but some research learnt me it used phpass just like PHPBB3 for example. I couldn't find much about it though.

Some links that may be useful, hope these help you.
http://www.openwall.com/phpass/
https://github.com/vanilla/vanilla/searc...&type=Code

[Keat]

You'll have to edit some code for this. It won't be very easy though afaik. I don't have much experience with Vanilla forums and their hashing, but some research learnt me it used phpass just like PHPBB3 for example. I couldn't find much about it though.

Some links that may be useful, hope these help you.
http://www.openwall.com/phpass/
https://github.com/vanilla/vanilla/searc...&type=Code

Yeah that is what I came across. I am now just going to try to crack these. But in the dump I am getting this..

TWSIF0Y0GEZAVVT67KN8OXM28462KKZCOG8RLH87B7C1SG9ZEI

As the password.

[/dev/net/tun]

At a glance:

.user.ini: auto_prepend_file = malicious_script.php

malicious_script.php: read post values "Email", "Password" if existent, write to file.

[Vyxn]

Capture the clean password before it was saved on different format.