Hacking IPB tut (With pic)

What we need?

Code:

Opera : http://www.opera.com/download/
Perl : http://downloads.activestate.com/ActivePerl/Windows/5.8/ActivePerl-5.8.7.813-MSWin32-x86-148120.msi
Exploit : http://www.sendspace.com/file/iny0qq

Lets Start 

1st you have to install Opera and perl 

and after that run the Exploit with perl . and then you will get something like this 



ok this will Work on 

Powered by invision power board v2.1.4
Powered by invision power board v2.1.5
Powered by invision power board v2.1.6
Powered by invision power board v2.1.3

so lets find a website 

goto google and type one of those in the top 

and you will get bunch of sites choose one 



and paste the link to forum in " Path to forum index" And click "Test forum vulnerability" 




if Site work with the exploit it will give something like this 


if the site Docent work it will give somthing like this so then you have to choose a another site 



Now change the User ID to admins ID most of times user id will be 1 or 2



if everything is good click “Get date from database”
a hash should pop up where it says “Returned date:” (note: you cant crack this hash you can only cookie spoof all the hash’s will be salted)

Now you have the hash ! now whats left to do is to login in with admin or whatever user you choose.

First go to your vulnerable website and register enter all the information needed preferably not entering real info. ( if your not a retard )

Set a random username like : plorlt
set an email like: a@hotmail.com ( it doesn’t have to be real I have a way of getting it without doing the email verify)

when it says an email has been sent to blabla just go back to the forum index and login.
When your in go to tools>advanced>cookies… now you need to find the vulnerable sites cookie you need to be logged in !
When you get to that cookie simple open the file and edit the Hash with the one you got with the exploit, and edit the member_id to whichever one you use to get the hash.

Then delete everything else in the cookie only member_id and hash is needed.

Click ok and refresh the page you should be logged in as your target !