Explain to me what a session stealer is

[Nixon!]

ok, so ive got an idea and it sounds like what we used to do back on cokemusic in like 2003, but not exactly sure. so explain please :)

[beau03]

There's a lot of 'session stealer' sites around this second and they are VERY VERY dangerous.

basically they encode something into the habbo credits page (via a variable exploit) which sends the information about your habbo account (typically the session id) which can be used to gain control of your account.

don't click any links that you aren't 100% secure with clicking at all. If you find yourself maliciously redirected to one of these sites you might not even realise. If you've got doubts right click and see if there's anything to do with a habbo credits page in the source. If there is; leave it and change your pass and email and email pass IMMEDIATELY.

This exploit is active on ALL hotels currently.

[MrCorny]

There's a lot of 'session stealer' sites around this second and they are VERY VERY dangerous.

basically they encode something into the habbo credits page (via a variable exploit) which sends the information about your habbo account (typically the session id) which can be used to gain control of your account.

don't click any links that you aren't 100% secure with clicking at all. If you find yourself maliciously redirected to one of these sites you might not even realise. If you've got doubts right click and see if there's anything to do with a habbo credits page in the source. If there is; leave it and change your pass and email and email pass IMMEDIATELY.

This exploit is active on ALL hotels currently.

Is that when you buy credits?

[beau03]

When your on any page.

[MrCorny]

On the habbo site i assume..

[Nixon!]

sounds exactly like what happened on coke, except instead of hidding the sessions it was just the URL
much thanks, any more info would be appreciated :)

[cps]

If there is; leave it and change your pass and email and email pass IMMEDIATELY.

This exploit is active on ALL hotels currently.


to be honest it could be on any habbo page and you can simply get rid of the problem by logging back out of habbo then in again this creates a new session and therfore the session logger can not gain accsess to your account.

[beau03]

TO REMOVE:

Internet Explorer:

1. LOG OUT of Habbo
2. Tools
3. Internet Options
4. Delete Cookies

Mozilla Firefox

1. Tools (Edit on a Mac)
2. Options
3. Privacy icon
4. Show Cookies
5. Remove All Cookies

Good Luck! :)

[crans]

it's not exactly dangerous if you login habbo after you've logged in on the home page.

they can only mess around with your habbo home etcc.

oh ye they are good for getting emails to acc ;')




TO REMOVE:

Internet Explorer:

1. LOG OUT of Habbo
2. Tools
3. Internet Options
4. Delete Cookies

Mozilla Firefox

1. Tools (Edit on a Mac)
2. Options
3. Privacy icon
4. Show Cookies
5. Remove All Cookies

Good Luck! :)

the second you logout of habbo the session ends anyways.. so why delete cookies lol?

you make it sound like it's a big virus coming to kill us lol.

deleting it does no effect.

[Decode]

Is that when you buy credits?
I just bought creds :eusa_wall

[tinyjosh01]

Out of intrest, if I got a ''session stealer'' while I was on habbo then after about 30 mins more I logged out the proper way, ( Top right on the pop-up)
would it still steal my session?

[Tom$]

Out of intrest, if I got a ''session stealer'' while I was on habbo then after about 30 mins more I logged out the proper way, ( Top right on the pop-up)
would it still steal my session?

No it only works if they aint been signed in longer then 10mins ur saying 30mins so Nope it wud ask for pw but they cud edit hp *probs..

[Shawnstra]

Thanks for the info. I needed this info too :)