Latest Announcemnent
New thread

Must read! Nulled (vBulletin & IPB) Vulns!

Status
Not open for further replies.
L

litewarez

Active Member
1,367
2008
1
0
Ok so made lil video of me playing about with this little DD (Directory Disclosure) vuln in the DGT releases of vBulletin but it was too big to upload so heres some scrennshots!

vBulletin & IPB Vulns!​



Boxheads Site!
[slide]http://www.imgcentre.com/img/uploads/big/5637a1331e.png[/slide]

Boxheads Files (http://belegit.org/validator.php)
[slide]http://www.imgcentre.com/img/uploads/big/0c81f0f865.png[/slide]

Database ive collected
68e7c1a058.png


Via this method i have also rooted 2 sites !

Things you should do!
1. Go phpBB
2. Remove the validator.php script!
3. Remove any other scripts thats not needed!
4. Rename ModCp and AdminCp to summat else
5. DO NOT STORE BACKUPS ON htdocs .... and especially with names like backup.sql


PLEASE CHECK IF YOU HAVE THIS FILE ON YOUR SERVER ID SO DELETE ASAP!!!!

I had database from about 12 people who entered the chat the other day, but you all know your DBS are safe and im trusted but others aint!

DELETE them asap!

Proof: http://belegit.org/validator.php - http://vbteam.info/validator.php

SAY THANKS IF THIS HELPED YOU

Shouts to warezdeamon for this aswell lol
 
56 comments
Lmao you will be surprised dood!

I have like 3.5Gb's of databases and 2 full sites via this tool! i found stupid things hidden on the site like wysywigs that allow file uploads then shel then injected index with webshell then root!


About 50% of users who read this will be like ooh fuck!
 
the only thing this thread shows is that you should be carefull when using nulled scripts nothing more is not rly an ipb or vb vulerability
 
yea but it is lol because these files are mainly shipped for ipb and vb.. not but the creators but by the nullers and the larger amount of users have nulled!
 
A lesson is to never trust anyone else his code. Not even NULLED ones =] , just go for phpBB or get the real deal, buy a license.
 
Lite your a hypocritical fuck. Look at your first post. You got gu1337 just like I did, look at your own words before criticizing mine.

Boxheads Site!
[slide]http://www.imgcentre.com/img/uploads/big/5637a1331e.png[/slide]

Boxheads Files (http://belegit.org/validator.php)
[slide]http://www.imgcentre.com/img/uploads/big/0c81f0f865.png[/slide]

Database ive collected
68e7c1a058.png


Via this method i have also rooted 2 sites !

I had database from about 12 people who entered the chat the other day,
Proof: http://belegit.org/validator.php - http://vbteam.info/validator.php
Click to expand...
 
I even saw 4* sites with a validator.. And even downloaded something with their Rapidleech.. (Yesterday, shoutbox .. playing)

personally, ive found 17 sites that have a validator.

edit: and i havent even looked at 1* sites!
 
Status
Not open for further replies.
Back
Top