[Xcel3rated 360]

CAB - Custom Authorization Bypass

[b]Custom Authorization : the type of authorization which involves a User and Password Which Results in a String of Code sent to The server for verification .


String :

PHP Code:

Code:

www.x.com/Login.php?id=adam+pwd=123

Now it gives a error that password is not Correct

We know that the adam's profile link is :

PHP Code:

Code:

www.x.com/profile.php?id=9813

now edit the String to :
PHP Code:

Code:

www.x.com/Login.php?id=adam+pwd=(fromDB9.8{y}1.3{z})

now , in the above String we are representing the DB map in coordinate system .

Now it will bypass The login medium and the Login will be cleared out !

[XWorm]

Interesting authentication.. First time I see it :S