PDA

View Full Version : Was bbpassword changed?


Dudsmack
06-18-2007, 06:53 PM
Was the cookie bbpassword changed with the 3.6.6 patch?

It use to be md5( md5(password) . salt ) but is no longer working in vB 3.6.7

CP,
06-18-2007, 07:50 PM
ask over at vb.com

Dismounted
06-19-2007, 07:30 AM
It still is.

wcm
07-05-2007, 09:40 AM
I have the same problem as you Dudsmack. Have you been able to find out anything more or have you gotten your script to work?

Dismounted
07-05-2007, 11:17 AM
The password cookie is using this formula:
md5(md5(md5($password) . $salt) . $license)

gordonrp
12-08-2007, 01:11 AM
The password cookie is using this formula:
md5(md5(md5($password) . $salt) . $license)

is $password the hash from the user table? Because i tried matching the usertable hash to the cookie as you stated above but with no luck..

Marco van Herwaarden
12-08-2007, 07:05 AM
No this is just the cookie hash.

The hash in the user table is:

md5(md5($password) . $salt)

DarkSoroush
11-17-2009, 08:58 PM
Is it different in VB3.8?!
I am trying to do this but no success! tried:
md5(md5(md5($hpassword) . $salt) . 'VBFXXXXXXX')
md5(md5(md5($_COOKIE['bbpassword']) . $salt) . 'VBFXXXXXXX')
md5(md5(md5($hpassword) . $salt))
md5(md5(md5($_COOKIE['bbpassword']) . $salt))
md5(md5($hpassword) . $salt)
md5(md5($_COOKIE['bbpassword']) . $salt)
md5($hpassword . $salt)
md5('jfusion'.md5($hpassword.$salt)).
md5(md5($hpassword).$salt)

VBFXXXXXXX is my license id!

What can i do?!

--------------- Added 1258512904 at 1258512904 ---------------

I found it!

md5($hpassword.'VBFXXXXXXX');