Giving someone access to your account settings without giving them your password

Giving someone access to your account settings without giving them your password​

This is just a basic useful tutorial on how to pretty much give someone access to your account settings without giving them your username or password, which is mainly used as far as I can see to upgrade accounts​

How do I do this?
Visit this link ( https://secure.runescape.com/m=webl...=wxw&ssl=1&expired=0&dest=account_settings.ws )and sign into it. As you can see the link is from runescape domain ( just hover over it) so do not post saying it is a phising link, for the love of god lol . It will come up with a page 404 (Not found) but it will have a s= id if you have typed the username/password correctly. This ID is pretty much in Jagex's database saying that you have logged in and can stay logged in throughout the website until the ID expires. This goes to a 404 page because I changed mod= to a false mod although loginforn.ws still sends the s id. You will end up with a page like this:



(I blanked out some of the session ID so you guys couldn't go on my account)


Once you have got this link (copy and pasted from your address bar), go over to mod=wxw and change it to www.
Code:

Code:

https://secure.runescape.com/m=weblogin/g=runescape/s=[sessionid]/redirect.ws?mod=[COLOR="Black"][SIZE="5"]wxw[/SIZE][/COLOR]&ssl=1&dest=account_settings.ws

Changes to

Code:

Code:

https://secure.runescape.com/m=weblogin/g=runescape/s=[sessionid]/redirect.ws?mod=[SIZE="5"][COLOR="Black"]www[/COLOR][/SIZE]&ssl=1&dest=account_settings.ws

NOTE:[sessionid] will be where your "s=09f3jhf2-dsie*agnaspfk" thing is.

Then give them the link with the mod being www, and they should auto sign into the account settings without a username or password at hand. You must remember that these ID's do expire every like 10 minutes or so, so make sure you give it to them in 10 minutes after you do it.

Conclusion
Hope people find this useful, you can pretty much view offences and membership using this method without having 'access' to the account. They are able to view old messages. People can also upgrade you without actually having you username and password with this method.

 

Hope someone finds this usefull

 

Pretty Awsome guide. I tried and it worked really amazing. how you come up with this ?

 

Could mod or someone verify this? 16 posts etc, cause I dont trust these kind of things.

 

It's a phsing link from what it looks like because the two people claiming it works are also fresh accounts made on sythe.

 

i did this is the past, and was getting some guy to make me p2p, next minute i log on and im at lummy bank.

 

No, it isn't, the link clearly says secure.runescape.com

 

Amazin how stupid people are when it clearly is from runescape domain secure.runescape.com

Oh well, there is dumb people everywhere

 

Thats why I want mod verify this.

 

Bumping this...

 

phishing link, dont go on links without verification

 

This is causing way more problems than solutions. Closing