HoloCMS me.php redirecting exploit fix

[NitroHabbz]

removed

 

[Jakeyy]

Thanks a lot. Keep getting those faggots from rage360 doing it to me.

 

[NitroHabbz]

Yeah. I banned Zorex and ImaDj's IP's and Hostnames via Htaccess.


now we need to fix index.php i got hit again

 

[Jakeyy]

Yeah. I banned Zorex and ImaDj's IP's and Hostnames via Htaccess.


now we need to fix index.php i got hit again

Would you mind pming the index.php exploit? I have some spare time and will fix it ;d

 

[NitroHabbz]

Cecer and me are looking into it already

 

[Pure]

Yeah. I banned Zorex and ImaDj's IP's and Hostnames via Htaccess.


now we need to fix index.php i got hit again

Pwned, What are they redirecting it to?

 

[KingAmir]

what's with my problem ? lol.

i already install HoloCMS setup and i delete install.php and upgrade.php
then i go to localhost it redirecting me to localhost/install.php
how to fix it

 

[MentaL]

Why not use .htaccess to restrict the filename usage and use it to mask real url locations?

 

[Jakeyy]

Pwned, What are they redirecting it to?

I wouldn't call it 'Pwned' It happened to my hotel, i found out within like 5 secs. And found it within a minuite.

And they redirected to rage360 (The hotel) Because no one wants to join it because it fails so badly that they have to exploit to get players.

 

[vista4life]

how can i use it;p

 

[AresCJ]

Nice release, but I think honestly there is more to be added instead of that.

 

[NitroHabbz]

Nah CJ, it works.

Once we added it the 360rage noobs couldnt redirect me.php so they started on index.php

@ Vista. In me.php search for the top snippet then replace it with the bottom one and save the php file

 

[Alpha Ducky]

Nah CJ, it works.

Once we added it the 360rage noobs couldnt redirect me.php so they started on index.php

@ Vista. In me.php search for the top snippet then replace it with the bottom one and save the php file

I think Vista means how do you redirect the me.php/index.php to his site

 

[vista4life]

yea thanks i hope you find more fixes

 

[NitroHabbz]

I think Vista means how do you redirect the me.php/index.php to his site

it was a javascript exploit. From what me and cecer1 discovered it was to do with the events module on me.php, but this will fix it and you can still use events module

Imadj was doing it on Habbz and then we patched it and released the patch

 

[AresCJ]

<script type="text/javascript">
window.location = "http://scriptingdomainsociety.net/"
</script>

is the code that ImaDJ and Zorex are using, which is "Javascript"...
They tried this on my hotel and I fixed it, and they haven't been trying it anymore. They do it because they don't think you have a solution to fixing it..
Zorex is good in php, so he can find bypasses, but that's good the code works.

 

[KingAmir]

I Fixed It

Why not use .htaccess to restrict the filename usage and use it to mask real url locations?

Nvm I Fixed It. It Redirects Me Because Im Using Xampp 1.7.0
I Used 1.6.5 It Didnt Redirect Me To Install.Php, It Go To Normal Place.
I Used 1.7.0 , It Cant Go To XamppSecurity But 1.6.5 Can.

 

[NitroHabbz]

<script type="text/javascript">
window.location = "http://scriptingdomainsociety.net/"
</script>

is the code that ImaDJ and Zorex are using, which is "Javascript"...
They tried this on my hotel and I fixed it, and they haven't been trying it anymore. They do it because they don't think you have a solution to fixing it..
Zorex is good in php, so he can find bypasses, but that's good the code works.

When he does we will fix his bypass.

Theres also quite a few exploits in their hotels cms too

:tongue:

 

[Sin-FuL]

When he does we will fix his bypass.

Theres also quite a few exploits in their hotels cms too

:tongue:

Yes, you are correct, but what if they have found them and have fixed them? You have to look past the box, NitroHabbz.

 

[NitroHabbz]

another one i found

 meta http-equiv="refresh" content="0;URL=URL HERE" />

now to work on a fix :smile: