[_Stoner]

Closed
Closed
Closed
Closed
Closed
Closed

[Kernel Mode]

The barracuda development TEAM are obviously all busy making love to potatoes.

[betamonkey]

I love how they spent all that time issuing updates yet didn't even fix the problem. It's not like they are dealing with a complicated issue here, the fix isn't even 1 line (You just wrap the fucking output with a certain function).

Either way everyone, go out and steal those Barracuda bots while you can, as it seems like the owners don't give a shit in fixing/protecting them.

Regards,
Beta Monkey

[brickshitter]

:|

May give the bot one last chance, but idk. Security should be everything when running something this illegal, I'm not fond of people being able to grab my IP and my bots.

You access your net with your home IP?

:|

[( ͡° ͜ʖ ͡°)]

Depends on the situation.

If it's a real net with actual infects/bots, def not.

Still though, pulling my IP, masked or not, bad news...

How many IP addresses do you have? ❓

[betamonkey]

I am not a php coder or whatever, but I am sure a fix for that messagebox thing isnt much.

Got something similar on my site, and fixed it using htmlspecialchars if I remember right

Yes, this is what is so pathetic about the whole situation. If I am right, it takes a long time to update all those customers, and to muck up such a simple fix - Even when the details of what was wrong was handed to you on a silver platter, is just plain retarded. I don't think the authors/staff understands that peoples bots were getting raped before and will continue until they take a moment and fix it right. Or better yet, just delete the entire project/sales threads and go learn something they can actually succeed in.

Regards,
Beta Monkey

[Liquified™]

I asked for a refund twice, no response.
I'm seriously disappointed.
I bought the full package, and the hosting was down for weeks, then the hosting got hacked and my bots were stolen.
Then they changed hosts, again, it was down.
This is complete bullshit.
I paid $75 for peanuts... broken peanuts.

[Shiroyasha]

and obfuscated the panel code slightly.

Slightly ? Did they even paid any efforts in trying to secure atleast the code of it ?
All they did was encrypt the php code with byte 64 which is the first thing anyone can do if they search google for "Crypt php code" or w/e

It is so easy to decrypt back to php code using online tools itself.

They could have atleast re-crypted the crypted code atleast 2-3 times or rather encoded it or used more better protection techniques

And god, for people making $50+ per sale, how hard is it to buy Zendguardian or ioncube

[xRate]

That sucks lol. inb4 OPs slaves get stolen.

[xRate]

eval executes php code? Oh god damn, this would make shit easier for me if I knew.

eval() Exectutes the php code indeed. Shit coders here on hf use it to "obfuscate" their shells. Skids.

[Kernel Mode]

If customers are that worried I would recommend fixing it yourself. It takes probably 1 minute, if that..

Only on HF would some idiot suggest you fix the product yourself.

[betamonkey]

If the panel is leaked deobfuscated, why don't you just patch it yourself?

It shouldn't be up to customers to fix the product they bought. 'Barracuda team' should fix it themselves, it is so god damn easy I cannot even figure out why they can't or won't. On that note - It makes you wonder how shitty other parts of the project are, considering they really bungled this part of it.

Beta Monkey

[_Stoner]

It shouldn't be up to customers to fix the product they bought. 'Barracuda team' should fix it themselves, it is so god damn easy I cannot even figure out why they can't or won't. On that note - It makes you wonder how shitty other parts of the project are, considering they really bungled this part of it.

Beta Monkey

I like that word... 'bungled'

But yeah, why should the customers have to fix a product they paid good money for? The software should be sold in good and working condition.

The solution the 'Barracuda Team' proposes is that users of the bot should password protect the login directory. Seems to be more of a nig-rig solution than anything good.

Plus, password protecting the directory wouldn't stop attackers from injecting an iframe of their exploit pack or java driveby into the Barracuda HTTP dashboard in order to infect the owner of the bot panel.

[American Apathy]

I find it pretty pathetic it hasn't been fixed, that goes to show you the 'experience' of the Barracuda team.

[Kernel Mode]

Only on HF would someone wait around for some lazy ass to fix it.

---

I'm confused, because the files I got were already deobfuscated.

You're a bit of an idiot really. 😅