Nulled VBulletin
 

What is a Nulled VBulletin version?
Its a hacked copy of vbulletin with all reference to license, copyright
and authentication removed from the php code.
Why should license holders worry of such script?
Anyone using a nulled version of any script not only affects their own server security
but any other sites on the same server since Nulled versions normally contain a backdoor.
So you may be a valid license holder yourself, but if you are on a shared host,
the guy a couple folders over from your webspace may be putting you at risk.

In my latest endeavor, I was surprised to see version 3.7.3 out so early on the hack sites.
Being bored today with nothing to do, I decided to tear into the php and sure enough,
found a complete backdoor access buried within a file.
When a user installs or upgrades to this Nulled version, an email is sent to the nuller,
notifying him of your url ,which is now all he needs to gain complete access.
How ,you may ask?
Through 2,163 lines of custom php, from grabbing your OS, kernel version, paths
and database info to issuing netstat commands and probing ports, to the more familiar,
delete,create and edit of any data on the server.(Linux and Windows)
I was amazed at how intense the back door was and at how much information it was obtaining.

Moral of the story
Cheating can cost you more than its worth in the long run.
The price of VBulletin is extremely reasonable not just for the amazing product itself
but also for all the support of the bulletin board script by its staff and members.
Dont use Nulled versions of any script.

~and for those of you reading this who may be running a nulled version...
please do not PM me asking where the code is buried because I am not a fan
of those who steal.

Great article. I expected the backdoor, but it to be more in depth, that's wow. Nothing is what it seems to be, but usually the opposite.