May 20, 2012, 11:36:17 AM *
Welcome, Guest. Please login or register.

Login with username, password and session length
News: THC is up and running !
 

 
advertisement:

Pages: [1] 2 3
  Print  
Author Topic: DBB and it's gay admin  (Read 2262 times)
zomgwtfbbq
Challenge Coder
Administrator
Hero Member
*****

Karma: +31340/-1
Posts: I am a geek!!


thc title: thc elite
thc points: 3315
challenges: (69/83)

View Profile
« on: September 18, 2010, 02:52:31 PM »
Share on FacebookFacebook Share

Almost forgot about this, but since ppl wanted to know what caused my recent inactivity on that forum, here we go...

A year or two, maybe three, ago I bumped into a potentially dangerous exploit(xss) on a forum called DBB, at first I didn't report it, just wanted to play around with it, which I did.
Even logged in on ppl's account after stealing their cookie through an iframe, didn't do anything harmful with it though, just wanted to see whether the thing rly worked.

After some time I pointed the exploit out, but was ignored by the admin.. he was probably convinced that a product tested by thousands of ppl couldn't contain any bugs.. well there wasn't a bug in the forum, it was a configuration error.. and tbh a very dumb thing as it allowed users to insert scripts and any other stuff into the forum threads.

As time passed by, I forgot about it, until recently when someone discovered the exploit as well, lol, might have been an ex-member that I told about this issue, who knows. :p

Anyway, the thing that happened after this was the reason why I felt I didn't wanna stay any longer on that forum.

Below is the conversation that followed, well sort of:
admin: blabla virus detected
me: yes well I told u before about this, but u didn't bother to fix it anyway
admin: nonsense, there are no exploits in this forum
me: wanna bet?
admin: didn't respond to my challenge, just saying it's impossible
me: posts the exploit as POC
admin: removes the html in posts thingie
me: haha laughs cause he got owned
admin: is fucked up and gives me yellow cards
me: laughs even more... see that I was right
admin: that was no exploit and more blablabla
me: wait whut, so I'm able to steal accounts and ur not calling it an exploit, lol?
admin: no, bans me from the thread and gives red card

So this is kind of how the conversation went in raw lines, as you can see I even helped out the admin in finding the exploit, and as a reward I get banned from the thread, why thank you.

He didn't even post his apologies for screwing up 100s of ppls computers, what a friggin' moron.

The guy even states he's a webmaster, well let me help you out of that dream:
- you manage to screw up a browser compatible stylesheet, how the fuck did you manage that?
- you don't know anything about web security
- you test your code on a live server
- and last but not least, you don't know anything about programming, remember the whoquotedme request from some member..?
You didn't even know whether the thing would be possible, regex look it up.

How does it feel, when you don't have moderating priviliges on this board?
Fucking moron, this is all I wanted to say about Mr. Schizophrenic.
Logged


only registered users with at least 25 hack challenge points can see links:
  click here in order to visit the hack challenges


Ook al ben ik een slet toch houdt ik van je..
Mandara
Ninja Assassin
Global Moderator
Full Member
*****

Karma: +197/-0
Posts: 238


thc title: n00b
thc points: 65
challenges: (5/83)

View Profile WWW
« Reply #1 on: September 18, 2010, 03:06:12 PM »
Share on FacebookFacebook Share

Whehehehehhe, you must be kidding about this, aren't you? Why didn't you screw up the forum anyway..? I thought we were brothers @ arms both wearing black hats. Cry
Logged

Give me your hand and I'll protect you, squeeze mine and I'll break yours.
zomgwtfbbq
Challenge Coder
Administrator
Hero Member
*****

Karma: +31340/-1
Posts: I am a geek!!


thc title: thc elite
thc points: 3315
challenges: (69/83)

View Profile
« Reply #2 on: September 18, 2010, 03:17:19 PM »
Share on FacebookFacebook Share

Whehehehehhe, you must be kidding about this, aren't you? Why didn't you screw up the forum anyway..? I thought we were brothers @ arms both wearing black hats. Cry
Yes, well if I knew about this earlier I would have definitely not told him, that's for sure.
I'm too nice for this world, pretty sure he would still be searching.. webmaster gimme a break.
Logged


only registered users with at least 25 hack challenge points can see links:
  click here in order to visit the hack challenges


Ook al ben ik een slet toch houdt ik van je..
lasQo
Newbie
*

Karma: +57/-1
Posts: 46


thc title: code ninja
thc points: 1295
challenges: (33/83)

View Profile
« Reply #3 on: September 18, 2010, 03:18:33 PM »
Share on FacebookFacebook Share

/grabs an extra large box of popcorn
Logged
FrostByte
Newbie
*

Karma: +118/-0
Posts: 49


thc title: 3t3rn4l n00b
thc points: 0
challenges: (0/83)

View Profile
« Reply #4 on: September 18, 2010, 06:25:08 PM »
Share on FacebookFacebook Share

How did you know he was gay anyway?.. oh never mind aren't all bodybuilders quite homosexual?  Grin OuTlOl, now where did I put my fucking Guinness!? >Sad
edit:
only registered users with at least 25 hack challenge points can see links:
  click here in order to visit the hack challenges
http://forum.dutchbodybuilding.com/

this is the site, right ice? uhm are you really sure that's a bodybuilding site? >_<
« Last Edit: September 18, 2010, 06:27:51 PM by FrostByte » Logged
31337-n-evil
Jr. Member
**

Karma: +42/-0
Posts: 59


thc title: 3t3rn4l n00b
thc points: 0
challenges: (0/83)

View Profile
« Reply #5 on: September 19, 2010, 09:26:29 AM »
Share on FacebookFacebook Share

kewl,are we planning a night of the trolls invasion?  Smiley
Logged
zomgwtfbbq
Challenge Coder
Administrator
Hero Member
*****

Karma: +31340/-1
Posts: I am a geek!!


thc title: thc elite
thc points: 3315
challenges: (69/83)

View Profile
« Reply #6 on: September 20, 2010, 02:23:25 PM »
Share on FacebookFacebook Share

@frosty: yep that's the site
@others: nope not planning anything, although I could easily help his forum to hell if I wanted to.
Just wanted to post my part of the story, if I posted it on DBB, it would have been erased faster than you can say: cottage cheese fried with blueberries and onions.

Hope he gets to read this, but doubt it.. would love to ban his retarded arse anyway.
Logged


only registered users with at least 25 hack challenge points can see links:
  click here in order to visit the hack challenges


Ook al ben ik een slet toch houdt ik van je..
FrostByte
Newbie
*

Karma: +118/-0
Posts: 49


thc title: 3t3rn4l n00b
thc points: 0
challenges: (0/83)

View Profile
« Reply #7 on: September 20, 2010, 04:35:30 PM »
Share on FacebookFacebook Share

kewl,are we planning a night of the trolls invasion?  Smiley
Not intended as total ownage of your ePride but the 'girl' on your avatar has a penis.  Sad
Logged
takedown
Jr. Member
**

Karma: +512/-1
Posts: 50


thc title: code ninja
thc points: 1475
challenges: (41/83)

View Profile
« Reply #8 on: September 20, 2010, 04:40:54 PM »
Share on FacebookFacebook Share

kewl,are we planning a night of the trolls invasion?  Smiley
Not intended as total ownage of your ePride but the 'girl' on your avatar has a penis.  Sad
Ouch, my belly hurts from the lulz! Cheesy
Logged

KTHNXBYE Smiley
zomgwtfbbq
Challenge Coder
Administrator
Hero Member
*****

Karma: +31340/-1
Posts: I am a geek!!


thc title: thc elite
thc points: 3315
challenges: (69/83)

View Profile
« Reply #9 on: September 20, 2010, 05:20:37 PM »
Share on FacebookFacebook Share

kewl,are we planning a night of the trolls invasion?  Smiley
Not intended as total ownage of your ePride but the 'girl' on your avatar has a penis.  Sad
Intellihance, it's a b.i.t.c.h. :p
Logged


only registered users with at least 25 hack challenge points can see links:
  click here in order to visit the hack challenges


Ook al ben ik een slet toch houdt ik van je..
Mandara
Ninja Assassin
Global Moderator
Full Member
*****

Karma: +197/-0
Posts: 238


thc title: n00b
thc points: 65
challenges: (5/83)

View Profile WWW
« Reply #10 on: September 23, 2010, 12:50:35 PM »
Share on FacebookFacebook Share

kewl,are we planning a night of the trolls invasion?  Smiley
Not intended as total ownage of your ePride but the 'girl' on your avatar has a penis.  Sad
Hehe I pointed that out several times as well, he even used to have a shemale album when this was still a vBulletin board. Grin
Logged

Give me your hand and I'll protect you, squeeze mine and I'll break yours.
zomgwtfbbq
Challenge Coder
Administrator
Hero Member
*****

Karma: +31340/-1
Posts: I am a geek!!


thc title: thc elite
thc points: 3315
challenges: (69/83)

View Profile
« Reply #11 on: September 24, 2010, 03:47:14 AM »
Share on FacebookFacebook Share

Wait what? >Sad
I can remember I warned him at that time, yet he didn't obey.

/mah poor feelings hurt Cry
Logged


only registered users with at least 25 hack challenge points can see links:
  click here in order to visit the hack challenges


Ook al ben ik een slet toch houdt ik van je..
Mandara
Ninja Assassin
Global Moderator
Full Member
*****

Karma: +197/-0
Posts: 238


thc title: n00b
thc points: 65
challenges: (5/83)

View Profile WWW
« Reply #12 on: September 24, 2010, 12:31:50 PM »
Share on FacebookFacebook Share

Wait what? >Sad
I can remember I warned him at that time, yet he didn't obey.

/mah poor feelings hurt Cry
As an admin you're not supposed to show your emotions, not even if you're hurt, damn you!
Logged

Give me your hand and I'll protect you, squeeze mine and I'll break yours.
FrostByte
Newbie
*

Karma: +118/-0
Posts: 49


thc title: 3t3rn4l n00b
thc points: 0
challenges: (0/83)

View Profile
« Reply #13 on: September 27, 2010, 05:55:32 PM »
Share on FacebookFacebook Share

Wait what? >Sad
I can remember I warned him at that time, yet he didn't obey.

/mah poor feelings hurt Cry
As an admin you're not supposed to show your emotions, not even if you're hurt, damn you!
Shemale porn, you should really visit Thailand mate. Tongue
Logged
zomgwtfbbq
Challenge Coder
Administrator
Hero Member
*****

Karma: +31340/-1
Posts: I am a geek!!


thc title: thc elite
thc points: 3315
challenges: (69/83)

View Profile
« Reply #14 on: September 28, 2010, 03:59:40 AM »
Share on FacebookFacebook Share

On-topic, hmmm too bad this thread ain't showing up yet in Gooogle.../bump
Logged


only registered users with at least 25 hack challenge points can see links:
  click here in order to visit the hack challenges


Ook al ben ik een slet toch houdt ik van je..
Pages: [1] 2 3
  Print  
 
Jump to:  


Related Topics
Subject Started by Replies Views Last post
RSS: Simpla Admin - Flexible & User Friendly Admin skin
Nulled Scripts
zomgwtfbbq 0 177 Last post July 05, 2010, 06:33:56 PM
by zomgwtfbbq
RSS: Admin Gem
Nulled Scripts
zomgwtfbbq 0 169 Last post June 23, 2010, 09:53:04 PM
by zomgwtfbbq
messageslibrary-admin.txt
Exploits
zomgwtfbbq 0 106 Last post July 01, 2009, 02:08:54 AM
by zomgwtfbbq
sourcebans-admin.txt
Exploits
zomgwtfbbq 0 119 Last post June 23, 2009, 09:40:05 AM
by zomgwtfbbq
Jpraise Admin V.2 Joomla Admin panel template
Templates
zomgwtfbbq 0 130 Last post June 15, 2009, 08:29:34 PM
by zomgwtfbbq
maxcms-admin.txt
Exploits
zomgwtfbbq 0 136 Last post May 14, 2009, 02:31:23 AM
by zomgwtfbbq
x10mediamp3-admin.txt
Exploits
zomgwtfbbq 0 145 Last post April 15, 2009, 05:33:51 AM
by zomgwtfbbq
zFeeder admin.php Direct Request Admin Authentication Bypass
Latest Tools and Files
zomgwtfbbq 0 132 Last post March 09, 2009, 09:54:17 PM
by zomgwtfbbq
minddezignpg-admin.txt
Exploits
zomgwtfbbq 0 134 Last post October 24, 2008, 12:13:00 AM
by zomgwtfbbq
SMF Board hacked and modded by zomgwtfbekjam aka Rembo from Tools & Design