Can anyone point me in the right direction on how to find exploits in forum sofrware such as vBulletin and MyBB?

I have a feeling all you do is look through the source code to find places where input isn't sanitized properly (SQLi, XSS, RCE, etc.), but I'm not sure if there's more to it than that.


Thanks!

You know the answer, why ask?

"Teach me how to find 0days...", he asked.

That's pretty much what everyone does. You learn how to program PHP fluently (if the forum software is using PHP, of course) and then you analyze the source, finding ways to break it. To effectively find 0days you need to have programming knowledge AND hacking knowledge really. No, I'm not just talking about running Kali and Skype. I'm talking actual knowledge. Obviously there are other ways, but that's the way it should be done.

What are you intentions with finding 0days?

(12-31-2014, 02:50 AM)BreShiE Wrote: That's pretty much what everyone does. You learn how to program PHP fluently (if the forum software is using PHP, of course) and then you analyze the source, finding ways to break it. To effectively find 0days you need to have programming knowledge AND hacking knowledge really. No, I'm not just talking about running Kali and Skype. I'm talking actual knowledge. Obviously there are other ways, but that's the way it should be done.

What are you intentions with finding 0days?

Kind of rusty with my PHP, I should probably try to brush up my skills.

Anyways, my intentions are primarily to patch the vulnerabilities in my own forums, then to exploit competing forums and sell their databases for profit. I already made a decent amount when I sold the VIPLeakForums database to some people who then publicly leaked it. However, I accomplished that through SE'ing, not exploiting.

Anyways, thanks for all the advice guys!

(12-31-2014, 02:50 AM)BreShiE Wrote: That's pretty much what everyone does. You learn how to program PHP fluently (if the forum software is using PHP, of course) and then you analyze the source, finding ways to break it. To effectively find 0days you need to have programming knowledge AND hacking knowledge really. No, I'm not just talking about running Kali and Skype. I'm talking actual knowledge. Obviously there are other ways, but that's the way it should be done.

What are you intentions with finding 0days?

Seems obvious that if you would want to find bugs in PHP, you'd need knowledge of PHP itself.

Another way to find exploits could be to input code or something like that in text fields or the URL. All ways to interact with the software are possible ways to attack the software. But I don't have helpful experience with that.

(12-31-2014, 01:00 PM)Finnex Wrote: Another way to find exploits could be to input code or something like that in text fields or the URL. All ways to interact with the software are possible ways to attack the software. But I don't have helpful experience with that.

It is true. Being knowledgeable isn't necessary. However, it is preferable, and much more useful.