Best Blackhat Forum

maybe someone can crack it?

---

maybe someone can crack it?

just edit /admin/index.php, delete $proper_response function.


-->

<?php
require_once "connect.php";
require_once "config.php";
$setting = array();
$settings = mysql_query ('select * from settings');

while ($settingrecord = mysql_fetch_array($settings)) {
$setting[$settingrecord["name"]] = $settingrecord["setting"];
}

if (key_exists('pay_with',$setting)) $setting['pay_with'] = unserialize($setting['pay_with']);
extract($setting);

function backgroundPost($url){
$parts=parse_url($url);

$fp = fsockopen($parts['host'],
isset($parts['port'])?$parts['port']:80,
$errno, $errstr, 30);
if (!$fp) {
return false;
} else {
$out = "POST ".$parts['path']." HTTP/1.1\r\n";
$out.= "Host: ".$parts['host']."\r\n";
$out.= "Content-Type: application/x-www-form-urlencoded\r\n";
$out.= "Content-Length: ".strlen($parts['query'])."\r\n";
$out.= "Connection: Close\r\n\r\n";
if (isset($parts['query'])) $out.= $parts['query'];

fwrite($fp, $out);
fclose($fp);
return true;
}
}

function safe_dirname($path)
{
$dirname = dirname($path);
return $dirname == '/' ? '' : $dirname;
}


?>
[/code]

(12-18-2014 12:27 AM)rapidshoot Wrote: [ -> ]just edit /admin/index.php, delete $proper_response function.


-->

require_once "connect.php";
require_once "config.php";
$setting = array();
$settings = mysql_query ('select * from settings');

while ($settingrecord = mysql_fetch_array($settings)) {
$setting[$settingrecord["name"]] = $settingrecord["setting"];
}

if (key_exists('pay_with',$setting)) $setting['pay_with'] = unserialize($setting['pay_with']);
extract($setting);

function backgroundPost($url){
$parts=parse_url($url);

$fp = fsockopen($parts['host'],
isset($parts['port'])?$parts['port']:80,
$errno, $errstr, 30);
if (!$fp) {
return false;
} else {
$out = "POST ".$parts['path']." HTTP/1.1\r\n";
$out.= "Host: ".$parts['host']."\r\n";
$out.= "Content-Type: application/x-www-form-urlencoded\r\n";
$out.= "Content-Length: ".strlen($parts['query'])."\r\n";
$out.= "Connection: Close\r\n\r\n";
if (isset($parts['query'])) $out.= $parts['query'];

fwrite($fp, $out);
fclose($fp);
return true;
}
}

function safe_dirname($path)
{
$dirname = dirname($path);
return $dirname == '/' ? '' : $dirname;
}


?>
[/code]

This is my index.php

--------------------------


<?php

session_start();

include "../config.php";


if( $_SESSION["alogin"] ) {




$prehead = <<<EOT
<p><H2>Welcome to your Admin Area!</H2></p>
EOT;
include "header.php";


}
else {
include "header.php";
include "../style.php";
?>


<center>
<form method="POST" action="loginnow.php"><br>
Admin Id:<br><input type="text" name="Adminid" value=""><br>
Password:<br><input type="password" name="Password" value=""><br>
<input type="submit" value="Login">
</form>
</center>
<?php
}
include "footer.php";

?>

----------------------------

Should I replace the full code with the one you posted? Ta

(12-18-2014 03:03 AM)bravo75 Wrote: [ -> ]Should I replace the full code with the one you posted? Ta

Thanks. +5Reps Added

Sorry!! I mean setting.php ^^

(12-18-2014 12:27 AM)rapidshoot Wrote: [ -> ]just edit /admin/index.php, delete $proper_response function.


-->

require_once "connect.php";
require_once "config.php";
$setting = array();
$settings = mysql_query ('select * from settings');

while ($settingrecord = mysql_fetch_array($settings)) {
$setting[$settingrecord["name"]] = $settingrecord["setting"];
}

if (key_exists('pay_with',$setting)) $setting['pay_with'] = unserialize($setting['pay_with']);
extract($setting);

function backgroundPost($url){
$parts=parse_url($url);

$fp = fsockopen($parts['host'],
isset($parts['port'])?$parts['port']:80,
$errno, $errstr, 30);
if (!$fp) {
return false;
} else {
$out = "POST ".$parts['path']." HTTP/1.1\r\n";
$out.= "Host: ".$parts['host']."\r\n";
$out.= "Content-Type: application/x-www-form-urlencoded\r\n";
$out.= "Content-Length: ".strlen($parts['query'])."\r\n";
$out.= "Connection: Close\r\n\r\n";
if (isset($parts['query'])) $out.= $parts['query'];

fwrite($fp, $out);
fclose($fp);
return true;
}
}

function safe_dirname($path)
{
$dirname = dirname($path);
return $dirname == '/' ? '' : $dirname;
}


?>
[/code]

Hey, please can somebody null this! really cool and would be nice

Could you please explain exactly how to crack this one? I get really confused by the method you tried to give us above!

Great but must be crack

ok guys i crack the admin end but the front end still show the license request but will post soon. ps my first crack shared on the family page. you guys wish me luck

---

(12-19-2014 05:42 AM)family11 Wrote: [ -> ]ok guys i crack the admin end but the front end still show the license request but will post soon. ps my first crack shared on the family page. you guys wish me luck

i crack it i hope this one get me vip lol love you goys making mirr link