Is it possible to login using sessionkey, v, s ( trinitycore ) ?

[tje3d]

Is it possible to login an account using sessionkey, v, s columns in a TrinityCore server ( wotlk - more info: account - TrinityCore - TrinityCore Collaboration Platform ) ?

I'm looking for new ways to use SQLi vuln's

[Veritable]

You would have to get a token, which I am pretty sure is not possible without first authenticating to the account of the ID that you are trying to get into ;s

[tje3d]

Anyone familiar with SRP6 ? more info ( algalon/SRP6.txt at master * norswap/algalon * GitHub - algalon/doc/packets at master * norswap/algalon * GitHub )
Is it possible to replace session ?

[Veritable]

You can't fake a random number that isn't generated and have the server go, 'oh ya, i did make that, i forgot.'

[tje3d]

You can't fake a random number that isn't generated and have the server go, 'oh ya, i did make that, i forgot.'

Can you tell more detail? what random number you mean ?

[andy012345]

No, you know what world needs to know to do proofs, you know nothing about the login information and nothing about how the client is logging in.

You know nothing Jon Snow.