Follow us on Twitter!
It is never to LATE to become what you never WERE.
Friday, April 25, 2014
Navigation
Home
HellBoundHackers Main:
HellBoundHackers Find:
HellBoundHackers Information:
Learn
Communicate
Submit
Shop
Challenges
HellBoundHackers Exploit:
HellBoundHackers Programming:
HellBoundHackers Think:
HellBoundHackers Track:
HellBoundHackers Patch:
HellBoundHackers Other:
HellBoundHackers Need Help?
Other
Members Online
Total Online: 25
Guests Online: 22
Members Online: 3

Registered Members: 82906
Newest Member: ilija
Latest Articles
View Thread

HellBound Hackers | Computer General | General Computer Problems

Author

HELP WITH PHPSESSID


Member

Your avatar

Posts:
Location:
Joined: 01.01.70
Rank:
Guest
Posted on 10-12-07 16:13
is there any way to resolve a host PHPSSID for a site? or where would one look to find a host PHPSESSID?
thanks for any feedback.Grin


Author

RE: HELP WITH PHPSESSID

Mr_Cheese




Posts: 2468
Location: Brighton, UK
Joined: 30.11.04
Rank:
Uber Elite
Posted on 10-12-07 18:07
sorry but im completely lost as to what you mean.

you have your session... and you want to do what with it?


http://www.hellboundhackers.org/
Author

RE: HELP WITH PHPSESSID


Member

Your avatar

Posts:
Location:
Joined: 01.01.70
Rank:
Guest
Posted on 10-12-07 18:21
You mean resolve the host where the session was created?
If that's the case then just get Add 'n' Edit Cookies extension for Firefox and look over the path of the session cookie.


Author

RE: HELP WITH PHPSESSID

spyware
Member



Posts: 4192
Location:
Joined: 14.04.07
Rank:
God
Warn Level: 90
Posted on 10-12-07 18:23
javascript:alert(document.cookie);

;x



img507.imageshack.us/img507/3580/spynewsig3il1.png
"The chowner of property." - Zeph
[small]
Widespread intellectual and moral docility may be convenient for leaders in the short term,
but it is suicidal for nations in the long term.
- Carl Sagan
[center]�Since the grid is inescapable, what were the earlier lasers about? Does the corridor have a sense of humor?� - Ebert[/ce
Author

RE: HELP WITH PHPSESSID


Member

Your avatar

Posts:
Location:
Joined: 01.01.70
Rank:
Guest
Posted on 10-12-07 19:10
no no. i can see the session id and no need to use javascript to see the cookie i have a cookie editor tool for firefox. Ok here is my situation maybe this will clear it up.
-I try and view and admin restricted page on a site (www.example.com/admin.php) and it gives me an internal server error and says check your settings. I want to see if it would let me view the page if i had the admin PHPSESSID. (PHPSESSID=????????)

-so where on a site does it generate an id for an admin.
-or is it even possible to find an id or is it only generated if you sign in as an admin?
-i can veiw all their directorys like admin_log.tlp, admin.tlp, admins.tlp and so on if this would help me

sry if my questions are confusing im trying to word them the best i can, thanks for all the feedback guysSmile

"and maybe what root said is what i want. ill try it. thx man"
(edit: the path of the cookie just says "/" what does that mean?)




Edited by on 10-12-07 19:16
Author

RE: HELP WITH PHPSESSID

spyware
Member



Posts: 4192
Location:
Joined: 14.04.07
Rank:
God
Warn Level: 90
Posted on 10-12-07 19:12
It generates the PHPSESSID on login, probably.



img507.imageshack.us/img507/3580/spynewsig3il1.png
"The chowner of property." - Zeph
[small]
Widespread intellectual and moral docility may be convenient for leaders in the short term,
but it is suicidal for nations in the long term.
- Carl Sagan
[center]�Since the grid is inescapable, what were the earlier lasers about? Does the corridor have a sense of humor?� - Ebert[/ce
Author

RE: HELP WITH PHPSESSID


Member

Your avatar

Posts:
Location:
Joined: 01.01.70
Rank:
Guest
Posted on 10-12-07 19:29
yeah but doesn't it come from some source? that i could possibly look at...


Author

RE: HELP WITH PHPSESSID

Mr_Cheese




Posts: 2468
Location: Brighton, UK
Joined: 30.11.04
Rank:
Uber Elite
Posted on 10-12-07 19:34
source??

what are you on about.

the code ? or the location?

the location = admin login area, where ever that is.
code = you cant see server side code.


http://www.hellboundhackers.org/
Author

RE: HELP WITH PHPSESSID


Member

Your avatar

Posts:
Location:
Joined: 01.01.70
Rank:
Guest
Posted on 10-12-07 19:46
and the session id is random, if that is what you are asking, so there is not a way that you would be able to generate the admin session just by looking at the source


Author

RE: HELP WITH PHPSESSID


Member

Your avatar

Posts:
Location:
Joined: 01.01.70
Rank:
Guest
Posted on 10-12-07 20:09
@Gamertag07v2

my advice to you is read read read!!!!

if you dont understand it then google it and search for it at wikipedia, a topic like this would have loads of materials.
I know everyone says this advice but it is the best way.
Author

RE: HELP WITH PHPSESSID


Member

Your avatar

Posts:
Location:
Joined: 01.01.70
Rank:
Guest
Posted on 10-12-07 20:17
Thanks everyone for the help. Im still kinda lost....im pretty sure that i wont be able to find what im looking for with the files im allowed to see. so im going to take a different approach. Iim going to keep trying to hack the site im messing with ill tell you if i get in with admin control. Thanks tho everyone who took the time to replyGrin