[_Stoner]

Closed
Closed
Closed
Closed
Closed
Closed

[PedroDJ]

Very interesting: I'm lucky that I didn't bought Barracuda HTTP Bot.

Thank you.

[Kernel Mode]

The barracuda development TEAM are obviously all busy making love to potatoes.

[betamonkey]

I love how they spent all that time issuing updates yet didn't even fix the problem. It's not like they are dealing with a complicated issue here, the fix isn't even 1 line (You just wrap the fucking output with a certain function).

Either way everyone, go out and steal those Barracuda bots while you can, as it seems like the owners don't give a shit in fixing/protecting them.

Regards,
Beta Monkey

[PackTheMoon]

May give the bot one last chance, but idk. Security should be everything when running something this illegal, I'm not fond of people being able to grab my IP and my bots.

I couldn't agree with this more. Sounds like a bad situation to be in.

[brickshitter]

:|

May give the bot one last chance, but idk. Security should be everything when running something this illegal, I'm not fond of people being able to grab my IP and my bots.

You access your net with your home IP?

:|

[( ͡° ͜ʖ ͡°)]

Depends on the situation.

If it's a real net with actual infects/bots, def not.

Still though, pulling my IP, masked or not, bad news...

How many IP addresses do you have? ❓

[redpois0n]

I am not a php coder or whatever, but I am sure a fix for that messagebox thing isnt much.

Got something similar on my site, and fixed it using htmlspecialchars if I remember right

[betamonkey]

I am not a php coder or whatever, but I am sure a fix for that messagebox thing isnt much.

Got something similar on my site, and fixed it using htmlspecialchars if I remember right

Yes, this is what is so pathetic about the whole situation. If I am right, it takes a long time to update all those customers, and to muck up such a simple fix - Even when the details of what was wrong was handed to you on a silver platter, is just plain retarded. I don't think the authors/staff understands that peoples bots were getting raped before and will continue until they take a moment and fix it right. Or better yet, just delete the entire project/sales threads and go learn something they can actually succeed in.

Regards,
Beta Monkey

[Lysandre]

Code

    if(isset($_GET['id'])
    && isset($_GET['os'])
    && isset($_GET['name'])){
    $result = mysql_query("SELECT * FROM bots WHERE id='" . $_GET['id'] . "'");

is this a blind sql injection i see ? ;)

[Liquified™]

I asked for a refund twice, no response.
I'm seriously disappointed.
I bought the full package, and the hosting was down for weeks, then the hosting got hacked and my bots were stolen.
Then they changed hosts, again, it was down.
This is complete bullshit.
I paid $75 for peanuts... broken peanuts.

[Mauler]

If customers are that worried I would recommend fixing it yourself. It takes probably 1 minute, if that..

[Lysandre]

Indeed. But i don't think many people know about htmlspecialchars().

[DООM!]

If customers are that worried I would recommend fixing it yourself. It takes probably 1 minute, if that..

Panel was encrypted. This deobfuscated link above is the first time we'll have the chance.

[Jаck]

Seems like a big blow, I'm interested in why they didn't bother to fix all the vulns before even re-releasing it.