vBulletin 5 pre-auth 0day RCE exploit - [100% Working - Free Download]

vBulletin 5 pre-auth 0day RCE exploit - [100% Working - Free Download] - Printable Version

+- Sinisterly (https://sinister.ly)
+-- Forum: Hacking (https://sinister.ly/Forum-Hacking)
+--- Forum: Hacking Tools (https://sinister.ly/Forum-Hacking-Tools)
+---- Forum: Hacxx's Posts (https://sinister.ly/Forum-Hacxx-s-Posts)
+---- Thread: vBulletin 5 pre-auth 0day RCE exploit - [100% Working - Free Download] (/Thread-vBulletin-5-pre-auth-0day-RCE-exploit-100-Working-Free-Download)

vBulletin 5 pre-auth 0day RCE exploit - [100% Working - Free Download] - hacxx - 08-11-2020

[Image: m7plXxf.jpg]

Info:
- The tool below is able to create live exploit code that can be used against vBulletin 5 sites. The user is able to execute php code into the any unpatched vBulletin 5.

Download 1:
https://filecrypt.cc/Container/75E1FDC40A.html

Download 2:
https://www.file-upload.com/f9ppitfqk7z0
http://nitroflare.com/view/06455DDBED713B8/vBulletin_5_pre-auth_0day_RCE_exploit.rar

RE: vBulletin 5 pre-auth 0day RCE exploit - [100% Working - Free Download] - hacxx - 08-12-2020

Site vulnerable example:

Code:
https://pitmaster.amazingribs.com

List of vBulletin 5 sites:

Code:
https://trends.builtwith.com/websitelist/vBulletin-5.x

RE: vBulletin 5 pre-auth 0day RCE exploit - [100% Working - Free Download] - bigStackz - 08-18-2020

(08-11-2020, 04:29 PM)hacxx Wrote:

Info:
- The tool below is able to create live exploit code that can be used against vBulletin 5 sites. The user is able to execute php code into the any unpatched vBulletin 5.

Download 1:
https://filecrypt.cc/Container/75E1FDC40A.html

Download 2:
https://www.file-upload.com/f9ppitfqk7z0
http://nitroflare.com/view/06455DDBED713B8/vBulletin_5_pre-auth_0day_RCE_exploit.rar

I dont know much php code can you give me a few codes i can execute to fetch passwords or sum

RE: vBulletin 5 pre-auth 0day RCE exploit - [100% Working - Free Download] - hacxx - 08-18-2020

(08-18-2020, 02:28 PM)bigStackz Wrote: I dont know much php code can you give me a few codes i can execute to fetch passwords or sum

The exploit doesn't work anymore, this RCE exploits stay on the public for 1 or 2 days and then they are patched.

Some php examples...

Code:
echo "sinisterly";
mail (youremail@gmail.com,test,works);

BuiltWith is giving this warning...

[Image: YwbFUVG.jpg]

RE: vBulletin 5 pre-auth 0day RCE exploit - [100% Working - Free Download] - bigStackz - 08-18-2020

(08-18-2020, 03:27 PM)hacxx Wrote:
(08-18-2020, 02:28 PM)bigStackz Wrote: I dont know much php code can you give me a few codes i can execute to fetch passwords or sum

The exploit doesn't work anymore, this RCE exploits stay on the public for 1 or 2 days and then they are patched.

Some php examples...

Code:
echo "sinisterly"; mail (youremail@gmail.com,test,works);

BuiltWith is giving this warning...

oh shit......i saw that warning