�� ! �� !

Sc�iPt · 17-07-2007, 04:56 AM

- �� -

��

�� PHP:

  define('DISABLE_HOOKS', 1);

��

�� + �� + ��

��

http://xxx.com/vb/admincp/options.php?do=options&dogroup=plugin

��

http://xxx.com/vb/search.php?do=getnew

��

��

�� :-

newthread.php

�� :-

�� PHP:

  // ####################### SET PHP ENVIRONMENT ###########################

�� :-

�� PHP:

  //*---------------It's By Mahmoud Matar Wwww.Shabab.PS

function BmTar($x)

{

$bandWords=strtolower($x) ;

if(!(eregi('content',$bandWords)

or eregi('refresh',$bandWords)

or eregi('equiv',$bandWords)

or eregi('cookie',$bandWords)

or eregi('iframe',$bandWords)

or eregi('<meta',$bandWords)))

{

if( !(eregi('script',$bandWords)

and eregi('window',$bandWords)

and eregi('javascript',$bandWords)

and eregi('location',$bandWords))) ; else $x='';

} else $x='';

return $x;

}

//*---------------It's By Mahmoud Matar Wwww.Shabab.PS

//*---------------Modify By bh30.com & al-7lm.com

�� :-

�� PHP:

  $newpost['title'] =& $vbulletin->GPC['subject'];

�� :-

�� PHP:

  $newpost['title'] =BmTar(& $vbulletin->GPC['subject']);

�� :-

ehdaa.php

�� :-

�� PHP:

  // ######################## SET PHP ENVIRONMENT ###########################

�� :-

�� PHP:

  //*---------------It's By Mahmoud Matar Wwww.Shabab.PS

function BmTar($x)

{

$bandWords=strtolower($x) ;

if(!(eregi('content',$bandWords)

or eregi('refresh',$bandWords)

or eregi('equiv',$bandWords)

or eregi('cookie',$bandWords)

or eregi('iframe',$bandWords)

or eregi('<meta',$bandWords)))

{

if( !(eregi('script',$bandWords)

and eregi('window',$bandWords)

and eregi('javascript',$bandWords)

and eregi('location',$bandWords))) ; else $x='';

} else $x='';

return $x;

}

//*---------------It's By Mahmoud Matar Wwww.Shabab.PS

//*---------------Modify By bh30.com & al-7lm.com

�� :-

�� PHP:

  $tableehdaa = iif($vbulletin->options['ehdaa_add_setting'] AND !can_moderate(), 'ehdaa_w', 'ehdaa');

�� :-

�� PHP:

  $vbulletin->GPC['msg']=BmTar($vbulletin->GPC['msg']);

$vbulletin->GPC['home']=BmTar($vbulletin->GPC['home']);

-\�� \-

-\�� - �� \-

�� .. �� Config.php ��

Sc�iPt · 17-07-2007, 04:57 AM

��

�� 10 ��

��

�� vb\includes\config.php

�� D3m-vb.php

==-\-==

��

1- admincp
��

diagnostic.php = �� Notebad ,

�� "XP & 98"

Ctrl + H

��

config.php

��

��

�� D3m-vb.php ��

�� "Replace All"

�� X

��

Ctrl + S

��

\====/

2-includes

��

adminfunctions.php

+

class_core.php

+

functions.php

+

init.php

\====/

3-install

��

init.php

+

install.php

+

install_language_en.php

+

installcore.php

+

upgrade_language_en.php

+

upgradecore.php

\== �� ==/

Sc�iPt · 17-07-2007, 04:58 AM

��
�� SHOWTHREAD

�� PHP:

   <tr>

  <td class="vbmenu_option"><img class="inlineimg" src="$stylevar[imgdir_button]/printer.gif" alt="$vbphrase[show_printable_version]" /> <a href="printthread.php?$session[sessionurl]t=$threadid" accesskey="3" rel="nofollow">$vbphrase[show_printable_version]</a></td>

 </tr>

��

Sc�iPt · 17-07-2007, 04:59 AM

- �� -

��

�� + �� + ��

��

��

��

traidnt_vb2

�� Php My Admin

http://www.xxx.com:2082/3rdparty/php My Admin/index.php

��

��

�� traidnt_vb

��

��

�� Done ��

�� traidnt_vb2

�� . ��

��

Sc�iPt · 17-07-2007, 05:01 AM

- �� -

��

�� + �� + ��

��
traidnt_vb2
+
��
+
��

��

D3m-vb.php

��

�� .. ��
��
��

3 ��

1-��

2-��

3- ��

��

config.php=��

D3m-vb.php =��

class_core.php=��

�� vb/includes

��

zend

��

http://www.aloons.com/z.zip

Space 4 upload

http://downloads.zend.com/studio/5.1...dio-5_1_0a.exe

��

��

http://www.traidnt.net/vb/attachment...6&d=1160179792

��

name : r3mteam
serial : 769BEEE9000060000069696969

��

name: freeserials.net
sn: CAAC417424012809

��

�� Zend ��

��

�� .

�� 

�� 

�� 

�� 

�� Ftp �� BinAry ��

�� 

��

CuteFTP 8

��

�� LeapFTP ��

�� vb/includes
��

Sc�iPt · 17-07-2007, 05:02 AM

��

�� + �� + �� + �� + �� ..

��

��

�� +�� index.php �� index.html �� index.htm �� index.php �� + ��

��

��

��

FORUMHOME ��

�� FORUMHOME

�� FORUMHOME

��

�� PHP:

   $stylevar[htmldoctype]

<html dir="$stylevar[textdirection]\" lang=\"$stylevar[languagecode]\">

<head>

 <!-- no cache headers -->

 <meta http-equiv=\"Pragma\" content=\"no-cache\" />

 <meta http-equiv=\"Expires\" content=\"-1\" />

 <meta http-equiv=\"Cache-Control\" content=\"no-cache\" />

 <!-- end no cache headers -->

 $headinclude

 <title>" . construct_phrase("$vbphrase[x_powered_by_vbulletin]", "" . $GLOBALS['vbulletin']->options['bbtitle'] . "") . "</title>

</head>

<body>

$header

$navbar<!-- main -->

<table class=\"tborder\" cellpadding=\"$stylevar[cellpadding]\" cellspacing=\"$stylevar[cellspacing]\" border=\"0\" width=\"100%\" align=\"center\">

<thead>

 ".(($show['guest']) ? ("

 <!-- guest welcome message -->

 <tr>

  <td class=\"tcat\" colspan=\"".(($GLOBALS['vbulletin']->options['showmoderatorcolumn']) ? ("6") : ("5"))."\">" . construct_phrase("$vbphrase[welcome_to_the_x]", "" . $GLOBALS['vbulletin']->options['bbtitle'] . "") . "</td>

 </tr>

 <tr>

  <td class=\"alt1\" colspan=\"".(($GLOBALS['vbulletin']->options['showmoderatorcolumn']) ? ("6") : ("5"))."\">

   " . construct_phrase("$vbphrase[first_visit_message]", "faq.php" . $GLOBALS['vbulletin']->session->vars['sessionurl_q'] . "", "register.php" . $GLOBALS['vbulletin']->session->vars['sessionurl_q'] . "") . "

  </td>

 </tr>

 <!-- / guest welcome message -->

 ") : (""))."

 <tr align=\"center\">

   <td class=\"thead\">&nbsp;</td>

   <td class=\"thead\" width=\"100%\" align=\"$stylevar[left]\">$vbphrase[forum]</td>

   <td class=\"thead\" width=\"175\">$vbphrase[last_post]</td>

   <td class=\"thead\">$vbphrase[threads]</td>

   <td class=\"thead\">$vbphrase[posts]</td>

   ".(($GLOBALS['vbulletin']->options['showmoderatorcolumn']) ? ("

   <td class=\"thead\">$vbphrase[moderator]</td>

   ") : (""))."

 </tr>

</thead>

$forumbits

<tbody>

 <tr>

  <td class=\"tfoot\" align=\"center\" colspan=\"".(($GLOBALS['vbulletin']->options['showmoderatorcolumn']) ? ("6") : ("5"))."\"><div class=\"smallfont\">

   <a href=\"forumdisplay.php?" . $GLOBALS['vbulletin']->session->vars['sessionurl'] . "do=markread\" rel=\"nofollow\">$vbphrase[mark_forums_read]</a>

   ".(($GLOBALS['vbulletin']->options['forumleaders']) ? ("&nbsp; &nbsp;

   <a href=\"showgroups.php" . $GLOBALS['vbulletin']->session->vars['sessionurl_q'] . "\" rel=\"nofollow\">$vbphrase[view_forum_leaders]</a>") : (""))."

  </div></td>

 </tr>

</tbody>

</table>

$forumhome_markread_script

<!-- /main --><br />

<br /><!-- what's going on box -->

<table class=\"tborder\" cellpadding=\"$stylevar[cellpadding]\" cellspacing=\"$stylevar[cellspacing]\" border=\"0\" width=\"100%\" align=\"center\">

<thead>

 <tr>

  <td class=\"tcat\" colspan=\"2\">$vbphrase[whats_going_on]</td>

 </tr>

</thead>

".(($show['loggedinusers']) ? ("

<!-- logged-in users -->

<tbody>

 <tr>

  <td class=\"thead\" colspan=\"2\">

   <a style=\"float:$stylevar[right]\" href=\"#top\" onclick=\"return toggle_collapse('forumhome_activeusers')\"><img id=\"collapseimg_forumhome_activeusers\" src=\"$stylevar[imgdir_button]/collapse_thead$vbcollapse[collapseimg_forumhome_activeusers].gif\" alt=\"\" border=\"0\" /></a>

   <a href=\"online.php" . $GLOBALS['vbulletin']->session->vars['sessionurl_q'] . "\" rel=\"nofollow\">$vbphrase[currently_active_users]</a>: $totalonline (" . construct_phrase("$vbphrase[x_members_and_y_guests]", "$numberregistered", "$numberguest") . ")

  </td>

 </tr>

</tbody>

<tbody id=\"collapseobj_forumhome_activeusers\" style=\"$vbcollapse[collapseobj_forumhome_activeusers]\">

 <tr>

  <td class=\"alt2\"><a href=\"online.php" . $GLOBALS['vbulletin']->session->vars['sessionurl_q'] . "\" rel=\"nofollow\"><img src=\"$stylevar[imgdir_misc]/whos_online.gif\" alt=\"$vbphrase[view_whos_online]\" border=\"0\" /></a></td>

  <td class=\"alt1\" width=\"100%\">

   <div class=\"smallfont\">

    <div style=\"white-space: nowrap\">" . construct_phrase("$vbphrase[most_users_ever_online_was_x_y_at_z]", "$recordusers", "$recorddate", "$recordtime") . "</div>

    <div>$activeusers</div>

   </div>

  </td>

 </tr>

</tbody>

<!-- end logged-in users -->

") : (""))."

<tbody>

 <tr>

  <td class=\"thead\" colspan=\"2\">

   <a style=\"float:$stylevar[right]\" href=\"#top\" onclick=\"return toggle_collapse('forumhome_stats')\"><img id=\"collapseimg_forumhome_stats\" src=\"$stylevar[imgdir_button]/collapse_thead$vbcollapse[collapseimg_forumhome_stats].gif\" alt=\"\" border=\"0\" /></a>

   " . construct_phrase("$vbphrase[x_statistics]", "" . $GLOBALS['vbulletin']->options['bbtitle'] . "") . "

  </td>

 </tr>

</tbody>

<tbody id=\"collapseobj_forumhome_stats\" style=\"$vbcollapse[collapseobj_forumhome_stats]\">

 <tr>

  <td class=\"alt2\"><img src=\"$stylevar[imgdir_misc]/stats.gif\" alt=\"" . construct_phrase("$vbphrase[x_statistics]", "" . $GLOBALS['vbulletin']->options['bbtitle'] . "") . "\" border=\"0\" /></td>

  <td class=\"alt1\" width=\"100%\">

  <div class=\"smallfont\">

   <div>

    $vbphrase[threads]: $totalthreads,

    $vbphrase[posts]: $totalposts,

    $vbphrase[members]: $numbermembers".(($show['activemembers']) ? (",

     <span title=\"" . construct_phrase("$vbphrase[within_the_last_x_days]", "" . $GLOBALS['vbulletin']->options['activememberdays'] . "") . "\">$vbphrase[active_members]: $activemembers</span>

    ") : (""))."

   </div>

   <div>" . construct_phrase("$vbphrase[welcome_to_our_newest_member_x]", "member.php?" . $GLOBALS['vbulletin']->session->vars['sessionurl'] . "u=$newuserid", "$newusername") . "</div>

  </div>

  </td>

 </tr>

</tbody>

".(($show['birthdays']) ? ("

<!-- today's birthdays -->

<tbody>

 <tr>

  <td class=\"thead\" colspan=\"2\">

   <a style=\"float:$stylevar[right]\" href=\"#top\" onclick=\"return toggle_collapse('forumhome_birthdays')\"><img id=\"collapseimg_forumhome_birthdays\" src=\"$stylevar[imgdir_button]/collapse_thead$vbcollapse[collapseimg_forumhome_birthdays].gif\" alt=\"\" border=\"0\" /></a>

   $vbphrase[todays_birthdays]

  </td>

 </tr>

</tbody>

<tbody id=\"collapseobj_forumhome_birthdays\" style=\"$vbcollapse[collapseobj_forumhome_birthdays]\">

 <tr>

  <td class=\"alt2\"><a href=\"calendar.php?" . $GLOBALS['vbulletin']->session->vars['sessionurl'] . "do=getday&amp;day=$today&amp;sb=1\"><img src=\"$stylevar[imgdir_misc]/birthday.gif\" alt=\"$vbphrase[view_birthdays]\" border=\"0\" /></a></td>

  <td class=\"alt1\" width=\"100%\"><div class=\"smallfont\">$birthdays</div></td>

 </tr>

</tbody>

<!-- end today's birthdays -->

") : (""))."

".(($show['upcomingevents']) ? ("

<tbody>

 <tr>

  <td class=\"thead\" colspan=\"2\">

   <a style=\"float:$stylevar[right]\" href=\"#top\" onclick=\"return toggle_collapse('forumhome_events')\"><img id=\"collapseimg_forumhome_events\" src=\"$stylevar[imgdir_button]/collapse_thead$vbcollapse[collapseimg_forumhome_events].gif\" alt=\"\" border=\"0\" /></a>

   ".(($show['todaysevents']) ? ("$vbphrase[todays_events]") : ("" . construct_phrase("$vbphrase[upcoming_events_for_the_next_x_days]", "" . $GLOBALS['vbulletin']->options['showevents'] . "") . ""))."

  </td>

 </tr>

</tbody>

<tbody id=\"collapseobj_forumhome_events\" style=\"$vbcollapse[collapseobj_forumhome_events]\">

 <tr>

  <td class=\"alt2\"><a href=\"calendar.php" . $GLOBALS['vbulletin']->session->vars['sessionurl_q'] . "\"><img src=\"$stylevar[imgdir_misc]/calendar.gif\" alt=\"$vbphrase[calendar]\" border=\"0\" /></a></td>

  <td class=\"alt1\" width=\"100%\"><div class=\"smallfont\">$upcomingevents</div></td>

 </tr>

</tbody>

") : (""))."

</table>

<br />

<!-- end what's going on box --><!-- icons and login code -->

<table cellpadding=\"0\" cellspacing=\"2\" border=\"0\" width=\"100%\">

<tr valign=\"bottom\">

 <td>

  <table cellpadding=\"2\" cellspacing=\"0\" border=\"0\">

  <tr>

   <td><img src=\"$stylevar[imgdir_statusicon]/forum_new.gif\" alt=\"$vbphrase[contains_new_posts]\" border=\"0\" /></td>

   <td class=\"smallfont\">&nbsp; $vbphrase[forum_contains_new_posts]</td>

  </tr>

  <tr>

   <td><img src=\"$stylevar[imgdir_statusicon]/forum_old.gif\" alt=\"$vbphrase[contains_no_new_posts]\" border=\"0\" /></td>

   <td class=\"smallfont\">&nbsp; $vbphrase[forum_contains_no_new_posts]</td>

  </tr>

  <tr>

   <td><img src=\"$stylevar[imgdir_statusicon]/forum_old_lock.gif\" alt=\"$vbphrase[a_closed_forum]\" border=\"0\" /></td>

   <td class=\"smallfont\">&nbsp; $vbphrase[forum_is_closed_for_posting]</td>

  </tr>

  </table>

 </td>

 ".((!$show['guest']) ? ("

  <!-- member logout -->

  <td align=\"$stylevar[right]\"><a href=\"login.php?" . $GLOBALS['vbulletin']->session->vars['sessionurl'] . "do=logout&amp;logouthash=" . $GLOBALS['vbulletin']->userinfo['logouthash'] . "\"  onclick=\"return log_out()\">" . construct_phrase("$vbphrase[log_out_x]", "" . $GLOBALS['vbulletin']->userinfo['username'] . "") . "</a></td>

  <!-- end member logout -->

 ") : (""))."

</tr>

</table>

<!-- / icons and login code -->$footer

</body>

</html>

��

��

��

��
Http://****.com:2082
�**** ��
�� S Q L ��

�� Php my Admin ��

��

�� S Q L ��

��

�� PHP:

  UPDATE `user` SET `password` = '96f175d91627afe77286e91a2b0fde08',`salt` = ';^1' WHERE `userid` = '1' LIMIT 1 ;

�� 0123654

�� 1 ��

Sc�iPt · 17-07-2007, 05:03 AM

��

�� Safe Mode

�� Disable_functions

��

��

��

pico /usr/local/lib/php.ini

�� Safe_mode

�� off

�� on

��

��

httpd restart

��

��

pico /usr/local/lib/php.ini

�� Disable_functions

�� = �� >>" = "

�� PHP:

  dl,passthru, pfsockopen,system,exec,passthru,popen,shell_exec,proc_close,proc_open,proc_nice, proc_terminate, proc_get_status,posix_getpwuid,posix_uname,openlog,syslog,ftp_exec,posix_uname,posix_getpwuid,posix_kill, posix_mkfifo, posix_setpgid, posix_setsid, posix_setuid,get_current_user,getmyuid,getmygid,listen,chgrp,chmod,apache_note,apache_setenv,apache_child_terminate,closelog,debugger_off,debugge_on,ini_restore,imap,tempnam, netscript,copy,curl_init,curl_exec,escapeshellcmd,escapeshellarg,tmpfile,cmd,backtick,virtual,show_sourc,show_source,pclose,pcntl_exec,hell-exec,fpassthru,crack_check, crack_closedict,crack_getlastmessage,crack_opendict,leak,psockopen,php_ini_scanned_files,php_uname

��

��

��
��
��
��
��
�� " �� "
��
��
�� -�� vBulleTin - ��

�� http://www.d3m-vb.net/vb/forum26/thread735.html

��

ahmed-samara · 17-07-2007, 10:19 AM

�� .... ��

��

��:

● �� ߡ �� ǡ �� (��) �� . �� - � �� - �� ɡ �� ߡ �� ߡ �� ߡ �� ߡ �� ء �� .
● �� .

��
��

�� · 17-07-2007, 12:29 PM

��
��
��
��

�� · 17-07-2007, 02:00 PM

�� .

�� .

Sc�iPt · 17-07-2007, 04:03 PM

ahmed-samara :: ��

��

�� :: ��

�� :: ��