Fetching POSTKEY

[crAyon]

Hey,

So I can fetch the post key, this code is very crude and done very fast
so don't even think about trolling me.

And some of it is copied from @iAegle

VB Code

Private Function Login(ByVal User As String, ByVal Password As String) As Boolean
        Dim Data As New System.Collections.Specialized.NameValueCollection()
        Dim SData As New System.Collections.Specialized.NameValueCollection()
        Data.Add("username", User)
        Data.Add("password", Password)
        Data.Add("submit", "Login")
        Data.Add("action", "do_login")
        SData.Add("action", "add_shout")
        SData.Add("shout_data", "ASDASASD")
        Dim wb As New WebClient()
        Dim bytes As Byte() = wb.UploadValues("http://itsmods.com/forum/member.php", "POST", Data)
        My.Computer.FileSystem.WriteAllText("C:\rcrayon\bytes.txt", System.Text.Encoding.ASCII.GetString(bytes), False)
        ListBox1.Items.AddRange(System.IO.File.ReadAllLines("C:\rcrayon\bytes.txt"))
        Dim i As Integer
        For i = 0 To ListBox1.Items.Count - 1
            If InStr(ListBox1.Items(i), "var my_post_key") Then
                Dim PostKey As Array
                Dim PostKeyTrimmed As String
                Dim PostKeyClean As String
                PostKey = Split(ListBox1.Items(i), "=")
                PostKeyTrimmed = Replace(PostKey(1), Chr(34), "")
                PostKeyClean = Replace(PostKeyTrimmed, ";", "")
                MsgBox("Your postkey is: " + PostKeyClean)
                SData.Add("postcode", PostKeyClean)
            End If
        Next
        Dim wb2 As New WebClient()
        Dim sbytes As Byte() = wb2.UploadValues("http://www.itsmods.com/forum/xmlhttp.php", "POST", SData)
        MsgBox(System.Text.Encoding.ASCII.GetString(sbytes))
        Return True
        Return False
    End Function

[JariZ]

so basically you can spam the whole shoutbox with this?

[iAegle]

Is the code trolling or are you ? (VB) Lets have a look

[crAyon]

[SuperNovaAO]

Code doesn't work: incorrect password xxxxxxxxxx

[crAyon]

Can't get it to post to shoutbox yet.

---

Code doesn't work: incorrect password xxxxxxxxxx

LOL!

[SuperNovaAO]

Can't get it to post to shoutbox yet.

Just take a browser like Google Chrome, Apple Safari, Mozilla Firefox, (Opera) Opera, Netscape, ..... M$ IE? and go to the frontpage and shout there.

[crAyon]

Can't get it to post to shoutbox yet.

Just take a browser like Google Chrome, Apple Safari, Mozilla Firefox, (Opera) Opera, Netscape, ..... M$ IE? and go to the frontpage and shout there.

Oh no, that's far too easy.

---

Full source attached.

[iAegle]

what about this?

(in C#)

Code:

string Source = Encoding.Default.GetString( bytes );
int Offset = Source.IndexOf( "var my_post_key = " );
int End = Source.IndexOf( "\"", Offset + 1 ) + 1;
string PostKey = Source.Substring( Offset + "var my_post_key = ".Length, End );

[SuperNovaAO]

I'll update the JS