| View previous topic :: View next topic |
| Author |
Message |
Golden Wing Grandmaster Cheater
Reputation: 0
Joined: 29 Aug 2007 Posts: 905
|
Posted: Wed Oct 10, 2007 9:41 pm Post subject: how to make a login |
|
|
in vb6 like how to link it to the notepad filled with their username and pass?
_________________
|
|
| Back to top |
|
 |
oib111 I post too much
Reputation: 0
Joined: 02 Apr 2007 Posts: 2947 Location: you wanna know why?
|
Posted: Wed Oct 10, 2007 9:47 pm Post subject: |
|
|
That would not be very smart. Because then the person can just look in it and then see it. Most programs like msn and aim I'm guessing store this kind of data in their server. But if you must I would suggest to read from the file. And check to see if the user is in there. If it is check the pass. If it wasn't in there you incorrect message. If the pass isn't the same incorrect message.
_________________
| 8D wrote: |
cigs dont make people high, which weed does, which causes them to do bad stuff. like killing |
|
|
| Back to top |
|
 |
appalsap Moderator
Reputation: 0
Joined: 27 Apr 2006 Posts: 6753 Location: Pakistan
|
Posted: Wed Oct 10, 2007 9:50 pm Post subject: |
|
|
| oib111 wrote: | | That would not be very smart. Because then the person can just look in it and then see it. Most programs like msn and aim I'm guessing store this kind of data in their server. |
That's true, but most clients support features like "remember my password" for auto-logins, where do you think they store THAT data?
|
|
| Back to top |
|
 |
Golden Wing Grandmaster Cheater
Reputation: 0
Joined: 29 Aug 2007 Posts: 905
|
Posted: Wed Oct 10, 2007 10:30 pm Post subject: |
|
|
isent their any program that people cant scan and see stufff?
_________________
|
|
| Back to top |
|
 |
oib111 I post too much
Reputation: 0
Joined: 02 Apr 2007 Posts: 2947 Location: you wanna know why?
|
Posted: Wed Oct 10, 2007 11:15 pm Post subject: |
|
|
Lol. What you could do. Although they could just disassemble your program and see it. But I'm not sure how many would. Is if you were doing an auto login you could store the id and password in your program as variables. But then you would have to save it as an .ini file. Although thats just as safe as a notepad file. I would put it in the registry.
_________________
| 8D wrote: |
cigs dont make people high, which weed does, which causes them to do bad stuff. like killing |
|
|
| Back to top |
|
 |
HomerSexual Grandmaster Cheater Supreme
Reputation: 5
Joined: 03 Feb 2007 Posts: 1657
|
Posted: Thu Oct 11, 2007 4:20 am Post subject: |
|
|
if your gonna do it clientside, then store the variables in program and encrypt them. or write and read a file using encryption. or appal will crack it in 10 - 15 seconds? maybe less
_________________
|
|
| Back to top |
|
 |
NothingToShow Grandmaster Cheater Supreme
Reputation: 0
Joined: 11 Jul 2007 Posts: 1579
|
Posted: Thu Oct 11, 2007 4:28 am Post subject: |
|
|
Or you can use the classic one for VB6. It's easy to get the password if you know how to, but most dont know it.
| Code: | If Text1.Text = "PASSWORD HERE" Then
Form2.Show
Else
Msgbox("Wrong Password")
End
End if |
Its very basic, and the password is case sensitive.
|
|
| Back to top |
|
 |
atom0s Moderator
Reputation: 205
Joined: 25 Jan 2006 Posts: 8587 Location: 127.0.0.1
|
Posted: Thu Oct 11, 2007 6:30 am Post subject: |
|
|
| Moller wrote: | Or you can use the classic one for VB6. It's easy to get the password if you know how to, but most dont know it.
| Code: | If Text1.Text = "PASSWORD HERE" Then
Form2.Show
Else
Msgbox("Wrong Password")
End
End if |
Its very basic, and the password is case sensitive. |
You can simply debug the code and find the password EASILY doing that. Proof:
Code of project: (1 textbox, 1 command button)
| Code: | Private Sub Command1_Click()
If Text1.Text = "ThisIsMyPassword" Then
MsgBox "Congrats!"
Else
MsgBox "Nope, sorry."
End If
End Sub |
Debugged in Olly:
Not to mention even if you didn't see it in the string refs, you could find the function thats comparing and see the arguments being pushed and the password would be there as well.
|
|
| Back to top |
|
 |
oib111 I post too much
Reputation: 0
Joined: 02 Apr 2007 Posts: 2947 Location: you wanna know why?
|
Posted: Thu Oct 11, 2007 8:06 am Post subject: |
|
|
Oh yes, thank you blankrider. Yes you should encrypt them. So you need an encryption and decryption functions in your program.
_________________
| 8D wrote: |
cigs dont make people high, which weed does, which causes them to do bad stuff. like killing |
|
|
| Back to top |
|
 |
Noz3001 I'm a spammer
Reputation: 26
Joined: 29 May 2006 Posts: 6220 Location: /dev/null
|
Posted: Thu Oct 11, 2007 8:08 am Post subject: |
|
|
| Use an obfuscator
|
|
| Back to top |
|
 |
oib111 I post too much
Reputation: 0
Joined: 02 Apr 2007 Posts: 2947 Location: you wanna know why?
|
Posted: Thu Oct 11, 2007 8:18 am Post subject: |
|
|
Lol that too. A good one for delphi is pythia.
_________________
| 8D wrote: |
cigs dont make people high, which weed does, which causes them to do bad stuff. like killing |
|
|
| Back to top |
|
 |
atom0s Moderator
Reputation: 205
Joined: 25 Jan 2006 Posts: 8587 Location: 127.0.0.1
|
Posted: Thu Oct 11, 2007 9:16 am Post subject: |
|
|
| noz3001 wrote: | | Use an obfuscator |
Not really a good solution to things. When you use one, the obfuscator prog adds code to your program to 'decrypt' the strings, which is almost always called right after the string is used in something, which, simply leads the hacker straight to the decrypt function. Leaving your program still as vulnerable as it was before.
In .NET, the creators of the Salamander decompiler went into full depth about this here:
http://www.remotesoft.com/salamander/stringencrypt/index.html
|
|
| Back to top |
|
 |
Golden Wing Grandmaster Cheater
Reputation: 0
Joined: 29 Aug 2007 Posts: 905
|
Posted: Thu Oct 11, 2007 12:24 pm Post subject: |
|
|
| Moller wrote: | Or you can use the classic one for VB6. It's easy to get the password if you know how to, but most dont know it.
| Code: | If Text1.Text = "PASSWORD HERE" Then
Form2.Show
Else
Msgbox("Wrong Password")
End
End if |
Its very basic, and the password is case sensitive. |
thx anyway i knew this way but this is the easy way and everyrone gonna have same pass i just wanted like i said becuase im not gonna rel and if i do i dont care if any hack it lol
_________________
|
|
| Back to top |
|
 |
DeletedUser14087 I post too much
Reputation: 2
Joined: 21 Jun 2006 Posts: 3069
|
Posted: Thu Oct 11, 2007 4:25 pm Post subject: |
|
|
| appalsap wrote: | | oib111 wrote: | | That would not be very smart. Because then the person can just look in it and then see it. Most programs like msn and aim I'm guessing store this kind of data in their server. |
That's true, but most clients support features like "remember my password" for auto-logins, where do you think they store THAT data? |
but it's on your computer lol.
*cough* SQL injection *cough*
|
|
| Back to top |
|
 |
oib111 I post too much
Reputation: 0
Joined: 02 Apr 2007 Posts: 2947 Location: you wanna know why?
|
Posted: Thu Oct 11, 2007 4:33 pm Post subject: |
|
|
| Kaspersky wrote: | | appalsap wrote: | | oib111 wrote: | | That would not be very smart. Because then the person can just look in it and then see it. Most programs like msn and aim I'm guessing store this kind of data in their server. |
That's true, but most clients support features like "remember my password" for auto-logins, where do you think they store THAT data? |
but it's on your computer lol.
*cough* SQL injection *cough* |
Let's see kasper.
SQL Injection = For your internet(http://www.securiteam.com/securityreviews/5DP0N1P76E.html)
Your Computer != WEB
_________________
| 8D wrote: |
cigs dont make people high, which weed does, which causes them to do bad stuff. like killing |
|
|
| Back to top |
|
 |
|