Login Register


vBulletin 5 pre-auth 0day RCE exploit - [100% Working - Free Download] filter_list
Author
Message
vBulletin 5 pre-auth 0day RCE exploit - [100% Working - Free Download] #1
[Image: m7plXxf.jpg]

Info:
- The tool below is able to create live exploit code that can be used against vBulletin 5 sites. The user is able to execute php code into the any unpatched vBulletin 5.

Download 1:
https://filecrypt.cc/Container/75E1FDC40A.html

Download 2:
https://www.file-upload.com/f9ppitfqk7z0
http://nitroflare.com/view/06455DDBED713...xploit.rar

Reply

RE: vBulletin 5 pre-auth 0day RCE exploit - [100% Working - Free Download] #2
Site vulnerable example:
Code:
https://pitmaster.amazingribs.com

List of vBulletin 5 sites:
Code:
https://trends.builtwith.com/websitelist/vBulletin-5.x

Reply

RE: vBulletin 5 pre-auth 0day RCE exploit - [100% Working - Free Download] #3
(08-11-2020, 04:29 PM)hacxx Wrote: [Image: m7plXxf.jpg]

Info:
- The tool below is able to create live exploit code that can be used against vBulletin 5 sites. The user is able to execute php code into the any unpatched vBulletin 5.

Download 1:
https://filecrypt.cc/Container/75E1FDC40A.html

Download 2:
https://www.file-upload.com/f9ppitfqk7z0
http://nitroflare.com/view/06455DDBED713...xploit.rar

I dont know much php code can you give me a few codes i can execute to fetch passwords or sum

Reply

RE: vBulletin 5 pre-auth 0day RCE exploit - [100% Working - Free Download] #4
(08-18-2020, 02:28 PM)bigStackz Wrote: I dont know much php code can you  give me a few codes i can execute to fetch passwords or  sum

The exploit doesn't work anymore, this RCE exploits stay on the public for 1 or 2 days and then they are patched.

Some php examples...
Code:
echo "sinisterly"; mail (youremail@gmail.com,test,works);

BuiltWith is giving this warning...


[Image: YwbFUVG.jpg]
(This post was last modified: 08-18-2020, 03:27 PM by hacxx.)

Reply

RE: vBulletin 5 pre-auth 0day RCE exploit - [100% Working - Free Download] #5
(08-18-2020, 03:27 PM)hacxx Wrote:
(08-18-2020, 02:28 PM)bigStackz Wrote: I dont know much php code can you  give me a few codes i can execute to fetch passwords or  sum

The exploit doesn't work anymore, this RCE exploits stay on the public for 1 or 2 days and then they are patched.

Some php examples...
Code:
echo "sinisterly"; mail (youremail@gmail.com,test,works);

BuiltWith is giving this warning...


[Image: YwbFUVG.jpg]

oh shit......i saw that warning

Reply







Users browsing this thread: