[Sʜᴀᴅᴏᴡ Rᴇᴀʟᴍ]

Ok boys, Lets waste some more space in the dumping ground people call Marketplace Discussion

Thread: https://hackforums.net/showthread.php?tid=1869070
Profile: https://hackforums.net/member.php?action...&uid=76911

Ok, Lets start with some boring stuff. Like the false advertising



Moneyback Guarantee? Ticket asking for the refund started on the 13th, Still haven't got my money back

Secured and Managed? Kill me now please, I will elaborate on their incompetence later on

Dedicated and Premium? I can guarantee it isn't premium

Professionals who know what they are doing? Please, Make it stahp

Fast Customer Support? I asked for a refund on the 13th, The person who is "In Charge" of their paypal didn't reply until the 18th (lol)
______________________________________________________________________

Now for the fun shit, The retards who call themselves professionals

Lets examine some retarded things they have done

1. Running their WHMCS as root
2. Having your permissions set as Nobody (UID & GID 99)
3. Disabling all php scripts that have their perms as 777 (https://puu.sh/5mVNk/5b1e7a0f1f.png)
4. Symlinking (RIFK)
5. Always checking their cpanel for security risks? Trying to find le 0-days r0fl? (https://puu.sh/5mVOx/66e2c05d54.png)


Holy jeez, Running EVERYONE as "Nobody" is so hopeless. Make it stop

[I Am JT]

Seems like a good community alert. Thanks for letting us know.,

[Orgy]

1. Running their WHMCS as root

I stopped here. What?

Do you mean they're running their webserver as root?

---

Holy jeez, Running EVERYONE as "Nobody" is so hopeless. Make it stop

I think he just meant the webserver is running as 'nobody', which is pretty standard.

---

3. Disabling all php scripts that have their perms as 777 (https://puu.sh/5mVNk/5b1e7a0f1f.png)

Are you saying they deleted your PHP scripts that were CHMOD 777?

[Mr. Singh]

runnin server as root is shiitest thing ever but i have much xperience in.hackin em but never say webserver runnin as root :/

[Orgy]

I can guarantee it isn't premium

How can you guarantee this?

[Sʜᴀᴅᴏᴡ Rᴇᴀʟᴍ]

I stopped here. What?

Do you mean they're running their webserver as root?

---

I think he just meant the webserver is running as 'nobody', which is pretty standard.

---

Are you saying they deleted your PHP scripts that were CHMOD 777?

They have installed their WHMCS under the root account. So if someone hexed it than they would instantly have a r00t shell

Not just the webserver, every USER is now running as nobody, if you do id you will get UID 99 and GID 99

As for the php scripts, if they are chmodded to 777 you get the good old 403

---

How can you guarantee this?

1. It isn't insurance
2. They are probably adding a price on there but I wouldn't say it's a premium
3. There aren't any prizes

[Orgy]

They have installed their WHMCS under the root account. So if someone hexed it than they would instantly have a r00t shell

Hexed? And under what root account? Are you saying that uid0 is the owner of the PHP files? That won't really make a difference, since the webserver is the one running the PHP files.

Not just the webserver, every USER is now running as nobody, if you do id you will get UID 99 and GID 99

What do you mean every 'user' is running as nobody? You sound confused here. Surely everyone doesn't have the same username 'nobody', or everyone would be logging into eachother's cPanel.

As for the php scripts, if they are chmodded to 777 you get the good old 403

Well that's just plain silly, though I don't see why you'd need to CHMOD 777, anyway.

---

2. They are probably adding a price on there but I wouldn't say it's a premium

Considering 'quality' is a relative term, it's kind of hard to guarantee that they aren't offering a 'premium' service.

[Sʜᴀᴅᴏᴡ Rᴇᴀʟᴍ]

Hexed? And under what root account? Are you saying that uid0 is the owner of the PHP files? That won't really make a difference, since the webserver is the one running the PHP files.

What do you mean every 'user' is running as nobody? You sound confused here. Surely everyone doesn't have the same username 'nobody', or everyone would be logging into eachother's cPanel.

Well that's just plain silly, though I don't see why you'd need to CHMOD 777, anyway.

---

Considering 'quality' is a relative term, it's kind of hard to guarantee that they aren't offering a 'premium' service.

Yeh, UID 0 = What whmcs was installed under. Correct me if I'm wrong but can't someone just mod the PHP file to include command execution and then run commands as root?

Users have different names, e.g a28483, A4838294 and so on but when you create files they are ran as nobody (With the "id" command)

Yeak ik, but still. If someone wants to use a PHP script under 777 they should be allowed

[Orgy]

Yeh, UID 0 = What whmcs was installed under. Correct me if I'm wrong but can't someone just mod the PHP file to include command execution and then run commands as root?

No. It's going to run as whatever the webserver is running as.

Users have different names, e.g a28483, A4838294 and so on but when you create files they are ran as nobody (With the "id" command)

That's because they are being ran by the webserver, which is running as 'nobody'. There's absolutely nothing wrong with this, and it'd actually be very strange if they had a bunch of webservers running as each user.

Yeak ik, but still. If someone wants to use a PHP script under 777 they should be allowed

Why? Do you even know CHMOD 777 is?

I understand you're frustrated that they aren't processing your refund faster, but you're only ridiculing yourself, here.

[Sʜᴀᴅᴏᴡ Rᴇᴀʟᴍ]

No. It's going to run as whatever the webserver is running as.

That's because they are being ran by the webserver, which is running as 'nobody'. There's absolutely nothing wrong with this, and it'd actually be very strange if they had a bunch of webservers running as each user.

Why? Do you even know CHMOD 777 is?

I understand you're frustrated that they aren't processing your refund faster, but you're only ridiculing yourself, here.

read, write execute for everyone (777). I'm on my iPad at the moment and might get on my computer later so I can explain it better without taking 10 minutes to write a word

[Orgy]

read, write execute for everyone (777). I'm on my iPad at the moment and might get on my computer later so I can explain it better without taking 10 minutes to write a word

Why would you want everyone to be able to read, write, and execute your files?

[Monetization]

I've bought hosting where my PHP script wouldn't run under the permission needed, I usually just send em a ticket and they fix it.

[crossings]

I was cheated too by this person HaX420 , I looked over the net for cheap Romanian hosting reseller service and http://www.xhostfire.com/ looked very cheap. But this cost me 24usd and they refuse the refund . This is for search engines to find this post easier : HaX420 cheater , cheater HaX420 , cheater xhostfire.com , xhostfire.com cheater.

So what happent was simple, I registered to them, and my account is down since 4 hours now. I cannot acces my own WHM panel . HaX420 comes with this answer to my ticket "In the normal course of business, we expect there may be occasional problems. " . What do you think ? 4 Hours of downtime and still counting ! Professional answer, what can I say. Really, it is a big scammer xhostfire.com, scam xhostfire.com, scam HaX420 correct answer.

This is the first time I was cheated in my entire life. This is the picture with scammer HaX420 http://postimg.org/image/6k4g1orpx/ .

I live in Romania, this guy is really in bad luck because I will press charges on Voxility company who provide the services (its a local Romanian company) and I'am sure they are going to take drastic messures because they did it before as I have noticed on local forum discussions.

[Monetization]

I was cheated too by this person HaX420 , I looked over the net for cheap Romanian hosting reseller service and http://www.xhostfire.com/ looked very cheap. But this cost me 24usd with no refund. This is for search engines to find this post easier : HaX420 cheater , cheater HaX420 , cheater xhostfire.com , xhostfire.com cheater.

So what happent was simple, I registered to them, and my account is down since 4 hours now. I cannot acces my own WHM panel http://5.254.101.117:2082/ . HaX420 comes with this answer to my ticket "In the normal course of business, we expect there may be occasional problems. " . What do you think ? 4 Hours of downtime and still counting ! Professional answer, what can I say. Really, it is a big scammer xhostfire.com, scam xhostfire.com, scam HaX420 correct answer.

This is the first time I was cheated in my entire life. This is the picture with scam HaX420 http://postimg.org/image/6k4g1orpx/ .

I live in Romania, this guy is really in bad luck because I will press charges on Voxility company who provide the services (its a local Romanian company) and I'am sure they are going to take drastic messures.

I just read this, And thought 2 things... Your grammer is bad lol.

And, Your going to press charges over something on the internet of 24 Usd? Damn bro. Don't you think lawyers, Court fees and all that would cost more? Good luck on that. 🤝

[DООM!]

I just read this, And thought 2 things... Your grammer is bad lol.

And, Your going to press charges over something on the internet of 24 Usd? Damn bro. Don't you think lawyers, Court fees and all that would cost more? Good luck on that. 🤝

Generally when you sue someone you sue for damage done + legal fees.