Site Exploit

[Obscurus]

Hey guys,I am gonna show you how you can trick some site's password recovery system.
First I am going to create a account:

Now go here:

All you have to do is to write the username and the email:

Now click retrieve and then a new password should appear:


Now,the password won't work ingame,just copy it and log in on the site,change the password to another and then log ingame.You just have to know someone's username and email,you can get all this info on forums.Good luck
Hope this helps you


List of working sites: http://wowcrysis.com
http://heavenwow.com
http://www.invasion-wow.net/
http://zwowz.com/
http://www.wow-origin.com/_eng/
http://www.thor-wow.com/
You can search in wow top 1000 ,there are more

[PwNoGrApHy]

tested and worked,nice find

[Skyaz1]

Worked for me!

[thebigman]

Good show old boy, working fine and legitimately. +4 rep

[Divineflight]

Oh i see, i got it now, it also works on monster wow, but it sends the new password to the email lol

[Thetruecrow]

That was just an example.

[Obscurus]

Nope,I made an account just for you to be aware of the username and email...The trick is that when you go at "forgot password" link,you will just have to write the username and the email and it will give you a new password for that account.

[Stige]

Epic shit, +rep for this find.

[Obscurus]

Epic shit, +rep for this find.

Thank you!

---------- Post added at 03:16 PM ---------- Previous post was at 03:04 PM ----------

Oh i see, i got it now, it also works on monster wow, but it sends the new password to the email lol

They fixed it on Monster WoW,it used to work there.

[schlumpf]

Hello,I am a mmowned active member and I would like if you could visit my last post and maybe +rep it if you like it...Sorry for distuurbing you right now..http://www.ownedcore.com/forums/worl...e-exploit.html (Site Exploit)
messages will be archived at yahoo side
I am wishing to become a contributor..
You can help me a lot

I just received this via MSN from [email protected]. Enjoy your -rep instead.

Hell, I don't even know you, so why are you messaging me just to annoy me and get +rep?

[Apoc]

I just received this via MSN from [email protected]. Enjoy your -rep instead.

Hell, I don't even know you, so why are you messaging me just to annoy me and get +rep?

I think -10k is plenty, no?

[CryptoCombat]

@OP: Nice rep!

Ontopic: Why would you post how to hack other people's accounts? That's not even a little bit cool.

[Ground Zero]

Lol'd at the -10k rep.

Closing this thread, not deleting it so site admins can be aware of this and fix it.