Skip to content

Latest commit

 

History

History
43 lines (22 loc) · 1.5 KB

README.md

File metadata and controls

43 lines (22 loc) · 1.5 KB
Raw

Skype-Message-Editor

Skype Message Editor is a simple program that sends a custom-crafted POST request to the skype and tricks it into changing another's user message

Please keep in mind that this should ONLY be used to test the vulnerability and you should not modify any messages without the explicit permission of the other person

Instructons on how to use it:

  1. Download Fiddler (http://www.telerik.com/download/fiddler)

  2. Open it

  3. Enable HTTPS Capture (Tools -> Fiddler Options -> HTTPS -> Check Capture HTTPS connects and Decrypt HTTPS traffic) (If you see any warnings click YES on everything)

  4. Login with your skype on web.skype.com

  5. Send a message to a chat/user

  6. Go back to fiddler and press CTRL + F and type the message you sent

  7. You should see 2 results select the second one

  8. Right click on it and select Copy -> Just URL

  9. Paste it into the program where it says "Request URL"

  10. On the side select Inspectors -> Headers and find RegistrationToken

  11. Right click it -> Copy value only

  12. Paste it into the program where it says "Registration Token"

  13. Go back to the web skype and highlight the message you want to edit by double clicking it

  14. Open up inspect element and you should see id="msg_*********************" copy it

  15. Paste it into the program where it says "Message ID" (The program will remove the msg_ part)

  16. Type the message you want into the program and click Send ;)

  17. Thats it! :)

This just shows how unsecure skype is.. MICROSOFT PLEASE FIX!