lavalair script holes

[tres]

post it all here. to prevent intruders from hacking site that uses lavalair..

[anderson]

post it all here. to prevent intruders from hacking site that uses lavalair..

This type of topic has been created here many times. So no need to create newly.

[kei_ki7]

This type of topic has been created here many times. So no need to create newly.

i think he need the link ??

[ozziemale31]

lol i know most ways of hacking this script but a good hacker never tells ther secrets

[tres]

hackers never reveals it self! we are here to share knowledge and to help others.. we use lavalair for our site becouse we dont have such knowledge to code...

[tres]

some intruderz uses c99shell. a famous hacking tool.... i am a victim of that c99shell.... A few months ago.. They have chmoded my file and folders to 0000..

[ozziemale31]

well you've come to the rite place to learn lol

[ozziemale31]

c99shell is crap i can steal a session using a php image done it to scot paul many a times lol

[tres]

yeah! Session id hijacking only steal ses id... but c99shell can control ur cpanel. mass inject, delete file, upload file etc.

[ranzit2]

yeah! Session id hijacking only steal ses id... but c99shell can control ur cpanel. mass inject, delete file, upload file etc.

c99 shell need to b uploaded but image need only to b linked.may b u had nt gud uploader

[anderson]

yeah! Session id hijacking only steal ses id... but c99shell can control ur cpanel. mass inject, delete file, upload file etc.

use a secured uploader.

[tres]

yah. So i have activated my hotlink protection..

[tres]

what are the other posible holes? and what are the solution?

[ozziemale31]

i know how to block c99shell from being used in any upload folder

[anderson]

i know how to block c99shell from being used in any upload folder

ozzie plz share ur experience on it sothat we can know more.