Login mission :)

[VeseliTigar]

Hey folks i have mission for anyone interested, i made a simple login application.
So anyone who is interested here's the link.

http://php.budeei.com/index.php

I own that domain name 100%. Who break it send me how did you hack so i could improve it cheers.

[Goatboy]

It'd be nice if it were in English.

[VeseliTigar]

It'd be nice if it were in English.

I thought i translated it. My bad.

[tucak]

lokacija.php throws back a parse error.
If you get the "Your login is coming from unfamiliar location!" page, the go back link is not working.

[VeseliTigar]

lokacija.php throws back a parse error.
If you get the "Your login is coming from unfamiliar location!" page, the go back link is not working.

Hmmm i tried it now, but it is okay with me. I'll check up code carefuly to see where's the error. Thx anyway

[tucak]

Its working now

Heres how to login to another account without password, if you know the username:
1. Login as your user
2. Change your projectlogin cookie to the target's (or you will need to go through them blindly, becouse you dont know your targets projectlogin, its a normal integer)
3. Open http://php.budeei.com/lokacija.php?name=[user]&code=[md5] where user is your target and md5 is the md5 of the first 3 numbers of your ip (eg.: for 1.2.3.4 it is md5(123))
4. on profile.php go through projectlogin until it says "[username] dobro dosli."
It worked for me.

[sanddbox]

lokacija.php throws back a parse error.
If you get the "Your login is coming from unfamiliar location!" page, the go back link is not working.

Sounds like it wants a different referer.