abhibundela / owaspbwa

Automatically exported from code.google.com/p/owaspbwa
1 stars 2 forks source link

Update Hackxor #75

Closed GoogleCodeExporter closed 9 years ago

GoogleCodeExporter commented 9 years ago
There is a small, but important change to Hackxor needed on the VM.  See 
details at https://groups.google.com/d/msg/owaspbwa/r5Q5HAqVrSA/t4GBYB3oPVwJ

Original issue reported on code.google.com by chuck.f....@gmail.com on 23 Oct 2012 at 3:36

GoogleCodeExporter commented 9 years ago
From Hackxor dev: The issue is that the hub71 level expects stored passwords to 
be hashed, but doesn't bother hashing new passwords before storing them.

The fix is to change hub71/ROOT/botpanel.jsp line 142 from
    changeSetting("passhash", user, newpass1, con);
to
    changeSetting("passhash", user, md5(newpass1), con);

and the same for line 70 of hub71/ROOT/botpanel2.jsp

Original comment by chuck.f....@gmail.com on 26 Jan 2013 at 2:17

GoogleCodeExporter commented 9 years ago
Updates made from 1.1 beta1.

Original comment by chuck.f....@gmail.com on 28 Jan 2013 at 2:38