Hacking an Administrator on vBulletin

[i_suck.]

Okay so I'm looking to hack the administrator or specific user of a vBulletin forum, most likely using the program Active Perl. Now I know nothing about the Perl language but I'm willing to learn it if I have to. I found a Perl Exploit script but I don't think it works right. I am even willing to write my own Exploit script if I can get it to work. I also downloaded Cain&Able for when I get the Hashcode of the password in MD5 format. Can anyone here tell me where's a good place to start and/or what to do and/or point me in the right direction?



I appreciate the help and advice.

[hendricius]

You will be out of luck. You can not crack/decrypt the passwords of the administrator. This is due to the fact that they are encrypted with another MD5 hash.

The way to go would be to try to retrieve access to his email account, then reset the password. This is actually exactly what the folks have been doing with Sony. But - we do not support hacking here.

[Roflicer]

I'll look for it when I'm home but I saw a code that you embed into an email and email it to a person and when they reply it sends back their ip, and all this other information that you can use to recover the owner of the websites password and redirect the website or do whatev you want, then you can download the db, decrypt the has and bam you have everyone's user names and passwords and emails. Then because why the fuck not download a paypal brute forcer, use the list of emails with corresponding passwords to check for match, buy metric shit tons of video game currency, then resell and have money sent to your legit paypal. Congratz on being a successful criminal and buy me a new camaro

[Idbjorn]

Looks like your security wasn't great enough for Mr. Bond.

[Roflicer]

Lol you running on an out dated version of Vista? Also,
Open dos
Type ping
Hit enter
Type website address
Hit enter
Print screen
Post of d3
You're now a hacker

[Idbjorn]

No, it's Windows 7 Ultimate 64 bit, and was a joke, mate. I know pinging a website doesn't do anything, haha. I mean the original user probably found a exploit on milw0rm and wants to learn how to use it so I thought my post was relevant.

[ItzNitro]

[Darchrow]

It's not very clever to ask such a question in a vBulletin board :-)
When you don't have any exploiting or coding experience forget about a selfmade script. Your only chance is a public exploit what works with the forum version.
And then you won't get basic md5 hashes. I think they are specially crypted and not crackable via C&A or any other bruteforcer.

[Idbjorn]

"I'll create a 'gooey' interface using visual basic, see if I can track an IP address". Jesus, help us.

[ItzNitro]

"I'll create a 'gooey' interface using visual basic, see if I can track an IP address". Jesus, help us.

GUI should be pronounced G-U-I rather than 'gooey' lol.

Even so, it's all so stupid lol. A GUI made with VB to get an IP. Oh lawd.