Read-only archive

A preserved archive of the Logical Gamers community forums, 2009-2025. The original threads and posts, served read-only. Registration, posting and private messages are gone for good.

is this a a hack on gaia

2.6k views · started by swagg8 ·
#3
It's just a gsi request to see if the current account logged on is authenticated or not.

Try it when not signed it, it will say "109-3User not authenticated"

When signed in, it will spit out a bunch of text.
#4
That "text" is your gaia55_ssid. Other words, it's your gaiaonline login session id. I'm assuming it's created by something along the lines off md5(md5(password) + timestamp) making nearly impossible to get if they are going down to the milliseconds. If you were to get other peoples SSID's you can session hijack their account. As far as I know you can't trade anything unless you know their password. All you can really do is spam on their account and possibly get them banned. A good way to mess with them would be to put all of their items in the donation thing for dumpster dive and such. However, session hijacking people's accounts is good for advertising I must add.
#5
all i need is cookiemanager
#6
Chad wrote:
That "text" is your gaia55_ssid. Other words, it's your gaiaonline login session id. I'm assuming it's created by something along the lines off md5(md5(password) + timestamp) making nearly impossible to get if they are going down to the milliseconds. If you were to get other peoples SSID's you can session hijack their account. As far as I know you can't trade anything unless you know their password. All you can really do is spam on their account and possibly get them banned. A good way to mess with them would be to put all of their items in the donation thing for dumpster dive and such. However, session hijacking people's accounts is good for advertising I must add.

A bot is in order?? haha maybe one to throw their stuff in their and then just use dumpster dive bots to attempt to score something good...
#7
ok where can i download dumpster dive bot
#8
-0- D i o r -0- wrote:
A bot is in order?? haha maybe one to throw their stuff in their and then just use dumpster dive bots to attempt to score something good...


You'll first have to find a way to grab their cookie. Sure a cookie grabber will work but you'll need a javascript exploit on gaiaonline first to execute the cookie grabber. All the javascript exploits I know of were patched.
#9
Still very possible to exploit this, you just got to look harder Chad.
#10
so how do i get a javascript
#11
swagg8 wrote:
so how do i get a javascript


-____________________________-

Google helps.
#13
Lostintehdark wrote:
Still very possible to exploit this, you just got to look harder Chad.


Well derp. I know how to, but there is no other way to grab someones cookie without cooking grabbing them from a Javascript exploit in gaiaonline. You can use other GSI's to get more information using the SSID. I can make programs that grabs peoples SSID's after they login but there is no point in doing that.
#14
ok i dont know how to really use it