+- Hack Forums (https://hackforums.net)
+-- Forum: Marketplace (https://hackforums.net/forumdisplay.php?fid=105)
+--- Forum: Bazaar (https://hackforums.net/forumdisplay.php?fid=450)
+---- Forum: Marketplace Discussions (https://hackforums.net/forumdisplay.php?fid=163)
+---- Thread: Closed (/showthread.php?tid=3083740)
Closed - _Stoner - Dec 9, 2012
Closed
Closed
Closed
Closed
Closed
Closed
* - PedroDJ - Dec 9, 2012
Very interesting: I'm lucky that I didn't bought Barracuda HTTP Bot.
Thank you.
* - Kernel Mode - Dec 9, 2012
The barracuda development TEAM are obviously all busy making love to potatoes.
* - betamonkey - Dec 9, 2012
I love how they spent all that time issuing updates yet didn't even fix the problem. It's not like they are dealing with a complicated issue here, the fix isn't even 1 line (You just wrap the fucking output with a certain function).
Either way everyone, go out and steal those Barracuda bots while you can, as it seems like the owners don't give a shit in fixing/protecting them.
Regards,
Beta Monkey
* - PackTheMoon - Dec 9, 2012
(Dec 9, 2012 10:44 PM)BV1 ツ Wrote: May give the bot one last chance, but idk. Security should be everything when running something this illegal, I'm not fond of people being able to grab my IP and my bots.
I couldn't agree with this more. Sounds like a bad situation to be in.
* - brickshitter - Dec 9, 2012
(Dec 9, 2012 10:44 PM)BV1 ツ Wrote: :|
May give the bot one last chance, but idk. Security should be everything when running something this illegal, I'm not fond of people being able to grab my IP and my bots.
You access your net with your home IP?
:|
* - ( ͡° ͜ʖ ͡°) - Dec 9, 2012
(Dec 9, 2012 11:08 PM)BV1 ツ Wrote: Depends on the situation.
If it's a real net with actual infects/bots, def not.
Still though, pulling my IP, masked or not, bad news...
How many IP addresses do you have? ❓
* - redpois0n - Dec 10, 2012
I am not a php coder or whatever, but I am sure a fix for that messagebox thing isnt much.
Got something similar on my site, and fixed it using htmlspecialchars if I remember right
* - betamonkey - Dec 10, 2012
(Dec 10, 2012 12:15 AM)redpois0n Wrote: I am not a php coder or whatever, but I am sure a fix for that messagebox thing isnt much.
Got something similar on my site, and fixed it using htmlspecialchars if I remember right
Yes, this is what is so pathetic about the whole situation. If I am right, it takes a long time to update all those customers, and to muck up such a simple fix - Even when the details of what was wrong was handed to you on a silver platter, is just plain retarded. I don't think the authors/staff understands that peoples bots were getting raped before and will continue until they take a moment and fix it right. Or better yet, just delete the entire project/sales threads and go learn something they can actually succeed in.
Regards,
Beta Monkey
* - Lysandre - Dec 10, 2012
Code
if(isset($_GET['id'])
&& isset($_GET['os'])
&& isset($_GET['name'])){
$result = mysql_query("SELECT * FROM bots WHERE id='" . $_GET['id'] . "'");* - Liquified™ - Dec 10, 2012
I asked for a refund twice, no response.
I'm seriously disappointed.
I bought the full package, and the hosting was down for weeks, then the hosting got hacked and my bots were stolen.
Then they changed hosts, again, it was down.
This is complete bullshit.
I paid $75 for peanuts... broken peanuts.
* - Mauler - Dec 10, 2012
If customers are that worried I would recommend fixing it yourself. It takes probably 1 minute, if that..
* - Lysandre - Dec 10, 2012
Indeed. But i don't think many people know about htmlspecialchars().
* - DООM! - Dec 10, 2012
(Dec 10, 2012 04:46 AM)Mauler Wrote: If customers are that worried I would recommend fixing it yourself. It takes probably 1 minute, if that..
Panel was encrypted. This deobfuscated link above is the first time we'll have the chance.
* - Jаck - Dec 10, 2012
Seems like a big blow, I'm interested in why they didn't bother to fix all the vulns before even re-releasing it.