SELLING Hackforums.net XSS - $20
by Unkn0wX - April 13, 2021 at 06:50 PM
#1
Found reflected XSS on Hackforums.net. 

Found HF Real IP Address.

Price $20.

POC
[Image: GaCtsGv.png]

If you interest, PM me.
Reply
#2
now do it for nulled.to Kappa
Reply
#3
Does nulled still use mybb as well or phpbb? 

(April 13, 2021 at 06:51 PM)IPegFembois Wrote: now do it for nulled.to Kappa
Reply
#4
It is not mybb exploit. Third-party addon in the forum.
Reply
#5
(April 13, 2021 at 06:56 PM)ferasdour Wrote: Does nulled still use mybb as well or phpbb? 

(April 13, 2021 at 06:51 PM)IPegFembois Wrote: now do it for nulled.to Kappa



yup they sure do
yup they sure do
yup they sure do
Reply
#6
(April 13, 2021 at 07:14 PM)IPegFembois Wrote:
(April 13, 2021 at 06:56 PM)ferasdour Wrote: Does nulled still use mybb as well or phpbb? 

(April 13, 2021 at 06:51 PM)IPegFembois Wrote: now do it for nulled.to Kappa



yup they sure do
yup they sure do
yup they sure do

Nulled uses IPB

Try it on cracked.to , they use MyBB
Reply
#7
Will this vulnerability work wherever this ridiculous MyBB plugin is installed?
Reply
#8
It is not MyBB exploit. One PHP page is vulnerable on the hackforums.net domain.
Reply
#9
I think you should just keep using the vuln to keep pulling hackforums real address over and over. That's the real value.
Reply
#10
(April 14, 2021 at 02:17 AM)verking Wrote: I think you should just keep using the vuln to keep pulling hackforums real address over and over. That's the real value.

The vulnerable type is reflected XSS, So I can't pull the data, but can make it with phishing or redirect url.
Reply
#11
It is still vulnerable.....................................
Reply
#12
i am interested in buying it can u pm me because i cannot
Reply

Possibly Related Threads…
Thread Author Replies Views Last Post
XSS In cruzeiro.sp.gov.br B4ngl4d3sh 0 108 April 11, 2021 at 01:26 PM
Last Post: B4ngl4d3sh
Newspapers (XSS - Injection) Journals teamkelvinsecteam 0 288 June 01, 2020 at 02:12 AM
Last Post: teamkelvinsecteam
Selling Gamegrin.com, Consolespot.net & Pokegym.net DBs Lawliet 0 820 October 06, 2018 at 10:10 AM
Last Post: Lawliet

 Users browsing this thread: 1 Guest(s)