So how do people work those *** password image exploits?

[JustAStupidAsshole]

Just curious..I wouldnt mind dipping into the persons password dump since I see his ***

Edit:
Looks like it tricks the server into thinking the request is from pixel.quantserve.com which allows it to be ran into the pages html...hm..

[!Marvelous!]

It is called an Flw and is pure PHP scripting.
You can not 'Dip into his password list' unless you guess his Password list URL, Since it us purly PHP.

[JustAStupidAsshole]

It is called an Flw and is pure PHP scripting.
You can not 'Dip into his password list' unless you guess his Password list URL, Since it us purly PHP.

All you have to do is figure out where it is being sent to =P I have dipped into plenty of password lists in the past. and I have dipped into one of these ones before.

I am simply asking how they are made.

[!Marvelous!]

Right, and you can not see where they are going because it is PHP.

[Vin]

Right, and you can not see where they are going because it is PHP.

Page source or look at the link it says it is from.

[!Marvelous!]

You can NOT see PHP script for THIS reason...
You can look at where it says it is from but that still leaves you guessing the .txt file name.
Unless you plan to Bruteforce guess the page title then you are SOL.

[JustAStupidAsshole]

You can NOT see PHP script for THIS reason...
You can look at where it says it is from but that still leaves you guessing the .txt file name.
Unless you plan to Bruteforce guess the page title then you are SOL.

Thats not exactly hard.

Someone sure hasn't heard of intelitamper

[Smithno13]

If the FLW is on gaiafag.***.com/login.php, go to gaiafag.***.com and you might see an index showing where the password is stored.