Originally Posted by
Ollydv
I am an Admin of a phpBB forum, and one of the users keeps spamming and creating mulitple account, so I wanna find his password because he said before he uses the same password on all forums he's registered with.
Could someone help? Thanks.
There are two ways I could think of to do this, for all of this you *have* to have access to the server and the database the forum uses, if you use something like invisionfree then this will NOT be possible:
- Custom modification of the login script used for the forum, edit it so it writes all passwords to a file, then simply wait for him to log in, view password in text file, etc.
- Get the database everything is stored in, and use something like cain to decrypt the encrypted password. Of course, you have to know what type of encryption has been used, and it takes over 4 hours with longer passwords.
Who needs drugs when you have electrons?
