phpBB Sentinel By hacking Inside

[admin]

##########################################################################
# _ _ _ _ _____ _ _ #
# | | | | | | (_) |_ _| (_) | | #
# | |_| | __ _ ___| | ___ _ __ __ _ | | _ __ ___ _ __| | ___ #
# | _ |/ _` |/ __| |/ / | '_ \ / _` | | || '_ \/ __| |/ _` |/ _ \ #
# | | | | (_| | (__| <| | | | | (_| | _| || | | \__ \ | (_| | __/ #
# \_| |_/\__,_|\___|_|\_\_|_| |_|\__, | \___/_| |_|___/_|\__,_|\___| #
# __/ | #
# |___/ #
#________________________________________________________________________#
| |
| Site: www.hackinginside.altervista.org |
| Project: PhpBB Sentinel For: Xss, RFI & SQL Injection |
| Authors: Vincy & Xspecial |
| Emails: [email protected] & [email protected] |
|________________________________________________________________________|

#-- Aprire config.php --#

#-- Nella linea 1 cercare: --#

----------
<?php
----------

#-- Inserire: --#

----------------------------------------------------------------
# Start PhpBB Sentinel Xss, RFI & SQL Injection By Vincy & Xspecial
$stringa = $_SERVER['QUERY_STRING'];
$host = $_SERVER['HTTP_HOST'];
$file = $_SERVER['PHP_SELF'];
$path = "$host$file?$stringa";
$ip = $_SERVER['REMOTE_ADDR'];
$maligno1 = 'http';
$maligno2 = 'http://';
$maligno3 = 'www.';
$maligno4 = 'http://www.';
$maligno5 = 'script';
$maligno6 = 'FROM';
$maligno7 = 'SELECT';
$maligno8 = 'WHERE';
$maligno9 = 'UNION';
$maligno10 = 'phpbb_';
$maligno11 = 'alert';
$maligno12 = 'password';
$finder_maligno1 = strpos($stringa, $maligno1);
$finder_maligno2 = strpos($stringa, $maligno2);
$finder_maligno3 = strpos($stringa, $maligno3);
$finder_maligno4 = strpos($stringa, $maligno4);
$finder_maligno5 = strpos($stringa, $maligno5);
$finder_maligno6 = strpos($stringa, $maligno6);
$finder_maligno7 = strpos($stringa, $maligno7);
$finder_maligno8 = strpos($stringa, $maligno8);
$finder_maligno9 = strpos($stringa, $maligno9);
$finder_maligno10 = strpos($stringa, $maligno10);
$finder_maligno11 = strpos($stringa, $maligno11);
$finder_maligno12 = strpos($stringa, $maligno12);
if ($finder_maligno1 >= 1 OR $finder_maligno2 >= 1 OR $finder_maligno3 >= 1 OR $finder_maligno4 >= 1 OR $finder_maligno5 >= 1 OR $finder_maligno6 >= 1 OR $finder_maligno7 >= 1 OR $finder_maligno8 >= 1 OR $finder_maligno9 >= 1 OR $finder_maligno10 >= 1 OR $finder_maligno11 >= 1 OR $finder_maligno12 >= 1)
{
$var=fopen("attacchi.html","a+");
fwrite($var, "Attacco: [ $path ] @ IP: [ $ip ]<br>
");
fclose($var);
echo "<center>Hacking Attempt<br>You IP was logged.<br>You IP: $ip</center>";
die();
}
# End PhpBB Sentinel Xss, RFI & SQL Injection By Vincy & Xspecial
----------------------------------------------------------------

#-- Aprire includes/page_tail.php --#

#-- Nella linea 33 cercare: --#

----------------------------------------------------------------
$admin_link = ( $userdata['user_level'] == ADMIN ) ? '<a href="admin/index.' . $phpEx . '?sid=' . $userdata['session_id'] . '">' . $lang['Admin_panel'] . '</a><br /><br />' : '';
----------------------------------------------------------------

#-- Dopo aggiungere: --#

----------------------------------------------------------------
$file = file("attacchi.html");
$attacchi = count($file);
$countattacchi = "Il PhpBB Sentinel ha bloccato $attacchi attacchi";
----------------------------------------------------------------

#-- Cercare nella linea 40: --#

----------------------------------------------------------------
'TRANSLATION_INFO' => (isset($lang['TRANSLATION_INFO'])) ? $lang['TRANSLATION_INFO'] : ((isset($lang['TRANSLATION'])) ? $lang['TRANSLATION'] : ''),
'ADMIN_LINK' => $admin_link)
----------------------------------------------------------------

#-- Sostituisci con: --#

----------------------------------------------------------------
'TRANSLATION_INFO' => (isset($lang['TRANSLATION_INFO'])) ? $lang['TRANSLATION_INFO'] : ((isset($lang['TRANSLATION'])) ? $lang['TRANSLATION'] : ''),
'ADMIN_LINK' => $admin_link,
'SENTINEL_COUNT' => $countattacchi)
----------------------------------------------------------------

#-- Aprire templates/subSilver/overall_footer.tpl --#

#-- Cercare nella linea 1: --#

----------------------------------------------------------------
<div align="center"><span class="copyright"><br />{ADMIN_LINK}<br />
----------------------------------------------------------------

#-- Sostituire con: --#

----------------------------------------------------------------
<div align="center"><span class="copyright"><br> {ADMIN_LINK} {SENTINEL_COUNT} <br>
----------------------------------------------------------------

#-- EoT --#
_________________
D3vil-C0de Crew => http://d3vilc0de.org
My Spaces => http://kinginfet.135.it
My Tool Cracker => http://totalcracker.135.it
My Dj Site => http://djkinginfet.135.it