Was bbpassword changed?

[Dudsmack]

Was the cookie bbpassword changed with the 3.6.6 patch?

It use to be md5( md5(password) . salt ) but is no longer working in vB 3.6.7

[CP,]

ask over at vb.com

[Dismounted]

It still is.

[wcm]

I have the same problem as you Dudsmack. Have you been able to find out anything more or have you gotten your script to work?

[Dismounted]

The password cookie is using this formula:

PHP Code:

md5(md5(md5($password) . $salt) . $license) 


[gordonrp]

Originally Posted by Dismounted

The password cookie is using this formula:

PHP Code:

md5(md5(md5($password) . $salt) . $license) 


is $password the hash from the user table? Because i tried matching the usertable hash to the cookie as you stated above but with no luck..

[Marco van Herwaarden]

No this is just the cookie hash.

The hash in the user table is:

md5(md5($password) . $salt)

[DarkSoroush]

Is it different in VB3.8?!
I am trying to do this but no success! tried:

PHP Code:

md5(md5(md5($hpassword) . $salt) . 'VBFXXXXXXX')
md5(md5(md5($_COOKIE['bbpassword']) . $salt) . 'VBFXXXXXXX')
md5(md5(md5($hpassword) . $salt))
md5(md5(md5($_COOKIE['bbpassword']) . $salt))
md5(md5($hpassword) . $salt)
md5(md5($_COOKIE['bbpassword']) . $salt)
md5($hpassword . $salt)
md5('jfusion'.md5($hpassword.$salt)).
md5(md5($hpassword).$salt) 


VBFXXXXXXX is my license id!

What can i do?!

--------------- Added [DATE]1258512904[/DATE] at [TIME]1258512904[/TIME] ---------------

I found it!

PHP Code:

md5($hpassword.'VBFXXXXXXX');