I think the question here is. Why werent the passwords encrypted?

You simply select the IFrame level of bandwidth you wish to use and hit 'attack,' and the attack is launched, Lets begin with a quick cookie parsing:example.co.uk, however with these pesky foreigners a Two dots method is required one can set a cookie for *.com.pl or *.com.fr, and override or corrupt credentials if there's anything between periods in domain name - and extra trailing periods are accepted by most resolvers One can set a cookie for ".com.", then bounce the visitor to [[email_database_hack/comments/#c_106577.]] , users won't be tempted to be suspicious, and may interact with the website.