@chicxulub said:
can anyone give me a hint on getting the admin page? I can create the admin@ user without the “user exists” using the trick, but still can’t log in. Even altering the sess ID.
If you’ve created the admin@ user and you cant log in to the admin portal with the credentials you gave the account, one of two things is likely:
- you haven’t created the user correctly.
- someone else has attacked at the same time as you and changed the credentials before you used them
You shouldn’t have to mess with session IDs, largely because until you’ve logged in to the admin portal with valid admin creds, you don’t have an admin session ID.