Security flaw on site | Defend the Web

I am an IDIOT [999]
11 years ago

0

Hello , I think there’s a security flaw on this site…. During one of the levels, I saw a list of usernames in the firebug menu and clicked on mine and a few to see why they were there…. Anyway, they seem to have been saved into my 1Password app for Safari and now it has given me the ability to log into someone else’s account? Hmmm, can’t be good?

Luke [flabbyrabbit]
11 years ago

0

“During one of the levels” can you be a bit more specific? Are you sure you are able to login to other users accounts?

Kabue
11 years ago

0

Wow sounds bad :P, hopefully it will be fixed…. But why did you post this in the tools and utilities section?? :D
So are you able to see what my password is??
-Kabue

I am an IDIOT [999]
11 years ago

0

I only got this login…I was on the beginner levels, but somehow it saved a user called thomasguilloton@msn.com - which is what I’m logged on with now….. Which wasn’t my username… I was just clicking on users in Firebug out of curiousity, and noticed new logins had been saved in 1Password, might be nothing… but I thought I’d let you know.

Luke [flabbyrabbit]
11 years ago

0

So 999 isn’t your own account? What is your real account?

I am an IDIOT [999]
11 years ago

0

MwynHa is my real account…. this account hardly seems to be used?

Luke [flabbyrabbit]
11 years ago

0

I can see no plausible explanation to how this could possibly have happened…

I am an IDIOT [999]
11 years ago

0

Maybe, somehow the text got copied into my 1Password app, the username seems to only be 999 and pass is something like 111, maybe that text somehow got copied and per chance it happened to be a real username… Ordinarily nothing would have happened, but someone here has decided upon a really low-security username and password combo?

J [ColdIV]
11 years ago

0

Got it, guess you just downloaded the file of Main Level 4 the username and password match

Luke [flabbyrabbit]
11 years ago

0

Ahh I see what has happened, what a weird coincidence

I am an IDIOT [999]
11 years ago

0

useful information:
username: 999
password: 911

oxide
11 years ago

0

fucking weird good find though

i bake therefore im fried!!