The Arcive of Official vBulletin Modifications Site.

Hackers ! Have no idea where to put this · **Released**: 08-20-2006

I got a pm from a member that he can hack the ftp in vbul useing a program called shadowscan he says he can retrieve passwords with it is this true and what can he do.

Better still how do i block such attacks in the future

Seiken · #2 08-21-2006, 03:20 PM

Why cant you people stop running scared for a minute and type clearly...He's not going to do anything without your password. Just change it to something like QbeU1947693 or whatever. If hes using some BruteForce, then your servers defenses are weak.

If you have a host, then you have to dea with their firewalls, if you own a server then add some protection.

Shazz · #3 08-21-2006, 04:01 PM

Yea? How often does it acutally work, If that there just threats..

Seiken · #4 08-21-2006, 11:41 PM

Don't worry whatever the case is. Just make sure to keep clean, fresh updates each day for the next few days. Shadow SCan searches for open ports on hosts and only affects Windows based systems. So if your a *Nix use, dont even give a hoot.

carnage1969 · #5 08-22-2006, 11:44 PM

Ok well its on a host server and is linx and i know even less about that but well when someone points something out you need to look into wheather its true or not.

Brandon Sheley · #6 08-23-2006, 12:03 AM

make sure you don't have a trojan on your pc, or a keylogger..
back when I first strating making forums, I had a few "fans" like this, and they we're actually hacking the site, but they had a keylogger on my pc, so no matter what pass I used, they were getting my pass..

good luck, vb is Very secure, I've never worried about it as far as this goes.

Seiken · #7 08-23-2006, 09:20 PM

Right there, you have Linux. ShadowScan has NO affect on non-windows systems. So just tell him to f off.

wtricks · #8 08-24-2006, 05:10 PM

Don't forget to BACKUP ALL your files and the DATABASE. Even if he hacks you can put the forums up in minutes

X vBulletin 3.8.12 by vBS Debug Information
Page Generation 0.08248 seconds Memory Usage 2,258KB Queries Executed 21 (?)
More Information
Template Usage: (1)SHOWTHREAD (1)ad_footer_end (1)ad_footer_start (1)ad_header_end (1)ad_header_logo (1)ad_navbar_below (1)ad_showthread_beforeqr (1)footer (1)forumjump (1)forumrules (1)gobutton (1)header (1)headinclude (1)modsystem_post (1)navbar (6)navbar_link (120)option (8)post_thanks_box (8)post_thanks_button (1)post_thanks_javascript (1)post_thanks_navbar_search (8)post_thanks_postbit_info (7)postbit (8)postbit_onlinestatus (8)postbit_wrapper (1)spacer_close (1)spacer_open (1)tagbit_wrapper Phrase Groups Available: global inlinemod postbit posting reputationlevel showthread	Included Files: ./showthread.php ./global.php ./includes/init.php ./includes/class_core.php ./includes/config.php ./includes/functions.php ./includes/class_hook.php ./includes/modsystem_functions.php ./includes/functions_bigthree.php ./includes/class_postbit.php ./includes/class_bbcode.php ./includes/functions_reputation.php ./includes/functions_post_thanks.php Hooks Called: init_startup init_startup_session_setup_start init_startup_session_setup_complete cache_permissions fetch_threadinfo_query fetch_threadinfo fetch_foruminfo style_fetch cache_templates global_start parse_templates global_setup_complete showthread_start showthread_getinfo forumjump showthread_post_start showthread_query_postids showthread_query bbcode_fetch_tags bbcode_create showthread_postbit_create postbit_factory postbit_display_start post_thanks_function_post_thanks_off_start post_thanks_function_post_thanks_off_end post_thanks_function_fetch_thanks_start post_thanks_function_fetch_thanks_end post_thanks_function_thanked_already_start post_thanks_function_thanked_already_end fetch_musername postbit_imicons bbcode_parse_start bbcode_parse_complete_precache bbcode_parse_complete postbit_display_complete post_thanks_function_can_thank_this_post_start tag_fetchbit_complete forumrules navbits navbits_complete showthread_complete
Messages:

The Arcive of Official vBulletin Modifications Site.

It is not a VB3 engine, just a parsed copy!