HOWTO: Log MyBB usernames and passwords to a file

This is my first tutorial here. Some sketchy kid is going to find this quite useful.

Please use this responsibly, and now that you know how this is done - never use the same password on a forum as you do on any other website!



Remember that the path of the text file is relative - it is just an example of where I might store my copy of MyBB, you need to edit the command and PHP code accordingly!

For security you could hide the text file up one directory level, within the Linux file system where visitors to your forum can't access (unless you have some kind of directory traversal vulnerability on your webserver).

I hope that you guys enjoyed this.

---

BONUS CONTENT:

So, you just followed the tutorial and now you want to make all of your users logged out?

Connect to your SQL database and run the following query:


This will force all users to login again, meaning you can harvest all of their passwords when they do so.

Or, if you'd like to be covert and only get one particular user's password do this, and replace x with their UID:

Thanks for the post.

01-04-2017, 09:39 PM

Widget Wrote: Thanks for the post.

Thanks, I've updated the OP with some free bonus content - telling you how to force your users to logout so that they have to login again.

01-04-2017, 10:32 PM

Kawaii Wrote: Thanks, I've updated the OP with some free bonus content - telling you how to force your users to logout so that they have to login again.

Cool Cool, very nice! Thanks for sharing.

Thanks for sharing, I need

Hey you idiot just read this rules:
http://nulledbb.com/misc.php?action=help

17-04-2017, 12:25 AM

pertatek Wrote: Hey you idiot just read this rules:
http://nulledbb.com/misc.php?action=help

I fail to see how this educational tutorial violated any of those rules. This is a morally grey zone to be honest. I've seen two different staff read this thread now so if it were breaking any site policy I'm sure it would already have been removed.

people should really never use same password for evrything

Posting to come back and unlock this.

27-04-2017, 06:00 AM

Anish Wrote: Posting to come back and unlock this.

Thank you for your interest! ^_^