Post hijack

[x4nt0n]

Its possible to overwrite someones posts.
What we only need to know is pid of post which we want to edit.
If we click on post date we will know post pid (pid will be in url param)

Then we need to create our own post, then click edit on our new post and proxy it to BurpSuite.
Then we only need to change pid, massage and send it


We can also edit post visibility by changing pp=Public to pp=Only+me

[CsEnox]

seems based