rogue admin, please advise
 

Hello All,
I have a rogue admin which we have had to ban. We have changed our vbulletin and ftp passwords so that he can no longer access the site, but he claims that he can destroy the site through the Advanced Warning System. He installed and configured it and never passed any of that knowledge on, so I am not sure what to believe. I really doubt he can do anything, but I would like to be sure.

Is it possible for him to damage our site through AWS when he does not have access to the VBulletin admins?

Thanks,
Kiristine

I'm not familiar with AWS as I don't use it, but it if requires access to the AdminCP:

https://vborg.vbsupport.ru/showthread.php?t=105759

anything's possible... i would remove the AWS to be on the safe side. the little benefit the hack provides is not worth a complete system loss IMO.

Have you tried to ip ban him, user ban him, and any other banning methods? Have you removed the AWS?

We havent removed the AWS because we use it really heavily. He is banned, but I am sure he has figured out ways around that. Today we got this message on the forum:

I am guessing he has found some kind of loophole. Any ideas on how he did this?

Also, is there another tool we can use that performs similarly or is AWS really the only option? At this point I would not be averse to paying for a tool that provides the functionality we need.

Thanks in advance!

the default infractions system is like this. only 3.6 though. was that message a pm of sumthing else?

My theory is that the former admin is using AWS to continue to monitor the site. Someone had posted a comment on the forum that they would like to rename AWS. A reply was posted by the robot with that message. The guy was flexing his muscles to prove that he still has control.

By the default infractions system, you mean what ships with Vbulletin OOTB, correct?

here's a description of the infractions system
what version of vbulletin are you running?

http://www.vbulletin.com/docs/html/m...ractions_intro

Thanks for the link.

We are running Vbulletin 3.6.4 and AWS 3.6.0.

the infractions system is already their then. its basically a warning system :D

i strongly suggest you take out AWS