Warrior Forum hacked - again

Discussion in 'Security' started by Tetradomain, May 11, 2008.

  1. #1
    Hey guys,

    Warrior Forum has been hacked again. It's a popular Internet Marketing forum, and they are using a custom script I think....

    I think they should have transferred to Vbulletin. They were hacked in Feb, and now again.

    I keep thinking if Paul Allen has so much money, why can't he frickin get Vbulletin? Sometimes you wonder...

    :rolleyes:
     
    Tetradomain, May 11, 2008 IP
  2. 1-3-3-7

    1-3-3-7 Well-Known Member

    Messages:
    605
    Likes Received:
    17
    Best Answers:
    0
    Trophy Points:
    110
    #2
    Well maybe it's not a money issue, but a "freedom" issue. With the custom script it's more flexible and when a VB exploit is found it's easier to find than if there was one for the custom script.
     
    1-3-3-7, May 11, 2008 IP
  3. dynashox

    dynashox Premium Member Staff

    Messages:
    8,662
    Likes Received:
    563
    Best Answers:
    3
    Trophy Points:
    335
    #3
    Hacked? Seem fine for me. I can login and access it without problem.
     
    dynashox, May 11, 2008 IP
  4. Tetradomain

    Tetradomain Peon

    Messages:
    70
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    0
    #4
    I saw nothing but Chinese characters...when accessing the main page earlier today.

    Definitely an exploit occurred. Yesterday, I could log in, but when I check the sub forums, it was all filled with Chinese writing.

    Maybe they fixed it?

    Edit: I see why -

    http://www.warriorforum.com/forum/default.asp This is my bookmark access URL, which I've been using for the past 2 years.

    Do you see Chinese characters? But on http://www.warriorforum.com/forum/ it's appears ok now. ODD.
     
    Tetradomain, May 11, 2008 IP
  5. royo

    royo Peon

    Messages:
    173
    Likes Received:
    3
    Best Answers:
    0
    Trophy Points:
    0
    #5
    Looks fine here.
     
    royo, May 11, 2008 IP
  6. xous

    xous Active Member

    Messages:
    173
    Likes Received:
    11
    Best Answers:
    0
    Trophy Points:
    60
    #6
    They are not using a custom script; it appears to be a GPL forum software called Snitz Forums 2000. http://forum.snitz.com/

    As to why they don't use Vbulletin it could be due to a number of reasons:
    1. There may not be a way to export the data from the current software to Vbulletin (I didn't actually look)
    2. Why pay for something that you can get for free and you can do almost anything you want with.
    3. Vbulletin gets exploited too

    on the other hand it looks like there hasn't been a release of the script since 2006 which may explain why it got exploited.
     
    xous, May 22, 2008 IP