[Bannedshee]

Special thanks to @Hellborn for providing some of this information.

Okay so this is more of admin stupidity then a vulnerability, like the merge dir for mybb or the install for vbulletin.

First, you're gonna need to find some plasma URLs, if you dont have one, try using a google dork like

"inurl:plasma/login.php"

or you can go to http://cybercrime-tracker.net/index.php?search=plasma where people report the login pages.

After you have a target website, simply replace login.php with install.php and create a new account, then go back to login.php and login.

This rarely works, but its pretty cool when it does.

So again thanks hellborn.

[Blue]

I am trying this now, Thank you a lot.
There are several way to hijack botnets, and I remember seeing a tutorial somewhere but I can't remember where.

EDIT; Doesn't seem like any of these works so guess I will have to wait and try some other time whenever the list is refreshed.

[Skitstep]

Google Dorks only came up with two results I tried some of the sites on cybercrime tracker, but none of those worked. Seems like a cool method though if you could get it to work correctly.

[Satan]

Google Dorks only came up with two results I tried some of the sites on cybercrime tracker, but none of those worked. Seems like a cool method though if you could get it to work correctly.

Best bet is to find ones that aren't listed, but that takes time and effort.
Even then, this would require someone to be pretty stupid with their setup, which most aren't, but is still possible.

[Bannedshee]

I am trying this now, Thank you a lot.
There are several way to hijack botnets, and I remember seeing a tutorial somewhere but I can't remember where.

EDIT; Doesn't seem like any of these works so guess I will have to wait and try some other time whenever the list is refreshed.

Yeah, i usually check the list and the google dork every day and see if theres a new site.

---

Google Dorks only came up with two results I tried some of the sites on cybercrime tracker, but none of those worked. Seems like a cool method though if you could get it to work correctly.

It works, just really hard to find sites

---

Best bet is to find ones that aren't listed, but that takes time and effort.
Even then, this would require someone to be pretty stupid with their setup, which most aren't, but is still possible.

This.

[Satan]

Yeah, i usually check the list and the google dork every day and see if theres a new site.

---

It works, just really hard to find sites

---

This.

What all can you do with it, I mean can you transfer them over to your own net?

[Bannedshee]

What all can you do with it, I mean can you transfer them over to your own net?

Yep, plasma has a built in function to update and install a new file using URL download, and it has a botkill.

[Reiko]

Hah. This is funnier than the booter thing.

[Oni]

You know, it is "vulnerabilities" like these that really entertain me. There's no worse vulnerability than a stupid administrator.

[Bannedshee]

You know, it is "vulnerabilities" like these that really entertain me. There's no worse vulnerability than a stupid administrator.

Its like leaving your front door open when you know theres a pack of wild dogs outside your house.