- Joined
- Nov 3, 2013
- Messages
- 185
Perhaps this is it
- Joined
- Oct 18, 2013
- Messages
- 8,989
Well just remember, the worlds leading software of course will have more hackers going after it than a lesser known one. 
- Joined
- Mar 24, 2010
- Messages
- 243
It is,
You would think they would configure the server better to block file uploads, It's only a few simple CHMOD changes and htaccess rules, Mod_security rules, But this is vBulletin/IB they can't even work out how to make a decent product anymore.
- Joined
- Sep 6, 2008
- Messages
- 1,798
- Joined
- Oct 18, 2013
- Messages
- 8,989
It's like they get free labor when things like this pop up. Instead of going through things, to ensure they are right, let a hacker find the exploits for you, free labor.
- Joined
- Oct 21, 2007
- Messages
- 2,829
Stil can't believe how dead that forum is now, wow.
- Joined
- Oct 18, 2013
- Messages
- 8,989
- Joined
- Apr 12, 2004
- Messages
- 4,272
Looks like they restored the database from this morning as there is
Video is gone.. What was it about?
Video is gone.. What was it about?
- Joined
- Sep 6, 2008
- Messages
- 1,798
a how to on hacking vb. lol
- Joined
- Apr 12, 2004
- Messages
- 4,272
This is wierd...
When viewing the forum, the last post is by Wayne Luke at 2:51pm
When viewing the thread, the last post is by dikidera at 2:20 pm
- Joined
- Sep 6, 2008
- Messages
- 1,798
yep, i see the same
- Joined
- Oct 18, 2013
- Messages
- 8,989
Cause they probably used a backup, and did not adjust the time on the server right.
- Joined
- Mar 24, 2010
- Messages
- 243
The video showed the hacker exploiting vBulletin.com this morning and writing a file named lol.txt to the server. the image in my above post shows todays date from the video before the hacker removed it.
- Joined
- Nov 3, 2013
- Messages
- 185
It appeared to be a video showing the hack into vbulletin.com demonstrating shell access to the host that allowed remote code execution. It referenced a zero day exploit being used.
- Joined
- Apr 12, 2004
- Messages
- 4,272
So it was a server issue and not a vb issue?
- Joined
- Oct 18, 2013
- Messages
- 8,989
Which would be good for vB5, helps them save face.
- Joined
- Mar 24, 2010
- Messages
- 243
It was a vBulletin 5 issue and stupid server admins leaving the server insecure. I wish I had downloaded the video now.
- Joined
- Nov 3, 2013
- Messages
- 185
I did not see them logged into VBulletin anywhere in the video.
- Joined
- Mar 24, 2010
- Messages
- 243
What it looked like they did was exploit an SQLi, Gained a way to inject a shell into the database, After that they ran shell commands and created the lol.txt etc and then defaced the site.
Looking at the video before it went down it seems vBulletin don't even rename their own admincp making it easy to exploit as most shells are injected into the admin area.
I see where Joe gets his nonsense now xD