Cracker Tracker

CrackerTracker

this is a port from the standalone system of the Cback.de CrackerTracker (was original made for phpBB) to an Product for vB

• Description
  this hack search in the requeststring for definied codeparts, is found any hit the skript was die and send a little massage
  in addition of security this simply skript discharged the server by automatic attacks from botskripts if the definations have a hit in the requests
• Instructions
  Install
  • upload the /elog/ directory and set the CHMOD of counter.txt and logfile_injects.txt to 666, this is only to log blocked requests
    if you not want to have writeable files on youre server this hack works without logging too and you can leave this part
  • at last install the CrackerTracker100-product.xml
  Update
  • uninstall product of v100
  • reinstall new product of v101
  Uninstall
  • uninstall the CrackerTracker100-product.xml
  • upload thedelete /elog/ directory
• Credits & Information
  i have only port this hack to a Plugin
  Authorof the Hack is Cback from www.cback.de
  only restraint of Cback is the Copyright in the footer
  
  (i hope my english was understandable )
  
  
  
• History
  • 10/03/06 Release 1.0.0
  • 15/05/06 Release 1.0.1
    • new searchpattern and handfull old replaced
    • little codemodifications
  • 15/05/06 Release 1.0.2
    • one typo in list (missing ",")

[NiTRoN]

I'm gettin same error as Lover1.. now I can't get into ACP.. wtf..

EDIT:25min later - I fixed my.. but involved of full resore and dumping whole database and restoring from .sql backup dump file.. Not a pleasent experience

[rolliet]

same thing here and have no access to my Admin CP. What do we do now???

[NiTRoN]

I'm guessing you will have to manually edit the sql database table to disable the plugin.. hmn.. now just gotta find out how or where is it the setting.. cause only site restore didin't fix it for me.. it give me more errors.. so the settings are in sql tables..

Run below sql query to disable the product (if your prefix is other than vbulletin) change to prefix_product in the code below

UPDATE `vbulletin_product` SET `active` = '0' WHERE `productid` = 'c_ct_v1' LIMIT 1 ;

then u should be able to remove/uninstall it

let me know if it works.......

[rolliet]

I ended up doing an empty and restore on my database. Everything worked fine but lost everything from midnight last. Have gone in and uninstalled product.

Thanks for the help though and hope it helps some out there.

[redlabour]

Works now - but :

It is unable to overwrite the old Version - means that it is going to installed double !!!

Please deinstall V1.0 and then (!) install the new one.

[Onur]

no doubleinstall,
first do uninstall the v1.00 product and install the 1.0.2 new, but you have not to upload the elog folders by an update

nicht doppelt installieren, wegen der ?nderung der product-id wird die alte version nicht ?berschrieben, ist aber eine einmalige sache

[Lover1]

I did uninstall the v1.0.0 and got that error. is that fixed with 1.0.2? I solved that error with restoring from a sql backup.

[kabadayi]

vbulletin flood guard

[sensimilla]

After uninstalling it the footer remains changed..
How do I remove

Protected by CBACK.de CrackerTracker

from the footer safely ?

[Onur]

uninstall the product of the ct in the productmanager and the plugin is replaced with the copyright, if you have installed the plugincache(another hack here in the board) you have to regenerate the cache of the plugins too

to try if the product real uninstalled(only the 1 hook with code) open
youre-board.tld/index.php?fopen
if not come a message, the CT is uninstalled