Register Members List Search Today's Posts Mark Forums Read

Reply
 
Thread Tools
  #1  
Old 27 Apr 2005, 02:14
Mythotical Mythotical is offline
 
Join Date: Jun 2004
Security Exploit Blocker

I'm looking to see if something like this: http://phpbb-amod.com/ has been created which blocks exploit attempts, blocks bots from trying to commit bandwidth theft, and so on. If so could someone direct me to the thread, if not, is there anyone willing to make this hack or take PHPBB's and rework it so it will work with vbulletin 3.0.X?

Thanks in advance
Steve
Reply With Quote
  #2  
Old 27 Apr 2005, 02:26
twoseven twoseven is offline
 
Join Date: Jan 2004
depending on permissions with vB you could not hotlink to files. also there are no known exploits to stock vB right now. if you dont want the bots you can disable them by blocking the ip addy(dont know why you would want to do this but to each his own)
Reply With Quote
  #3  
Old 27 Apr 2005, 02:35
Reeve of shinra's Avatar
Reeve of shinra Reeve of shinra is offline
 
Join Date: Oct 2001
Do you have a direct link to the page with the mod? I dont feel like looking.
__________________
Make someone smile today!
Reply With Quote
  #4  
Old 27 Apr 2005, 05:14
Tekton Tekton is offline
 
Join Date: Jun 2004
Real name: Jason S
Originally Posted by Reeve of shinra
Do you have a direct link to the page with the mod? I dont feel like looking.
Doesn't sound like you're too concerned about it then~ :P
__________________
Currently: (vb3~)
Stockmarket Minigame - Discussion Threads - Secure Login BETA (IP + bit mask)

Planned for personal use:
Helpful System, Favorites, Super Announcement, Subscriptions (different), HostingCP, Team Gather, psuedo-UserCP, and Member Transfer
Reply With Quote
  #5  
Old 27 Apr 2005, 15:34
Reeve of shinra's Avatar
Reeve of shinra Reeve of shinra is offline
 
Join Date: Oct 2001
heh, as far as I know the latest versions of vb are secure but I am always interested in looking at other security measures.
__________________
Make someone smile today!
Reply With Quote
  #6  
Old 30 Apr 2005, 06:00
Mythotical Mythotical is offline
 
Join Date: Jun 2004
Yes vb has a very good security stable forum but I believe in alot of security now a days. I will get a direct link to the mod so everyone can see it.

Ok got it, here is the link for a bit of a description and download the file:
http://phpbb-tweaks.com/downloads.php?mode=sub&cid=916

Here is a link of what it blocks so you can see its not the bots it blocks but DDos Attempts that can slow down a server or even shut it down.
http://phpbb-tweaks.com/security.htm...ecurity-caught

Last edited by Mythotical : 30 Apr 2005 at 06:03. Reason: Automerged Doublepost
Reply With Quote
  #7  
Old 30 Apr 2005, 14:38
Zachery's Avatar
Zachery Zachery is offline
 
Join Date: Jul 2002
Real name: Zachery Woods
Originally Posted by Mythotical
Yes vb has a very good security stable forum but I believe in alot of security now a days. I will get a direct link to the mod so everyone can see it.

Ok got it, here is the link for a bit of a description and download the file:
http://phpbb-tweaks.com/downloads.php?mode=sub&cid=916

Here is a link of what it blocks so you can see its not the bots it blocks but DDos Attempts that can slow down a server or even shut it down.
http://phpbb-tweaks.com/security.htm...ecurity-caught
If you are under a DDOS you call your host a pray, not install a hack..
Reply With Quote
  #8  
Old 05 May 2005, 22:58
Mythotical Mythotical is offline
 
Join Date: Jun 2004
Zachery, HUH?!? LOL, I do not understand the language the you speak. Lamen's terms if you would please.
Reply With Quote
  #9  
Old 05 May 2005, 23:24
Zachery's Avatar
Zachery Zachery is offline
 
Join Date: Jul 2002
Real name: Zachery Woods
Originally Posted by Zachery
If you are under a DDOS you call your host a pray, not install a hack..
If you are under a Distribtued Denial of Service attack, you call your host, and you pray
Reply With Quote
  #10  
Old 09 May 2005, 01:19
Mythotical Mythotical is offline
 
Join Date: Jun 2004
LOL, see thats the thing, I have my own server so he doesn't watch that stuff I have to. So this type of hack would be good for me. But if it doesn't exist or is not possible, I'll live.
Reply With Quote
  #11  
Old 09 May 2005, 01:41
Brandon Sheley's Avatar
Brandon Sheley Brandon Sheley is offline
 
Join Date: Mar 2005
Real name: Brandon
i know austins phpbb mod very well, vB isn't anything like phpbb on how its one of the boards you can search google for known exploits... any vb exploits are usually found by the developers b4 the latest vB is even released
__________________
Do you have questions about managing a forum, check out my Admin Forum.
*NEW* Our latest Interview with Scott Molinari - from: vb-Germany!
Trying to offer vBulletin 5 Connect info as well.
Reply With Quote
  #12  
Old 09 May 2005, 04:57
Hellspire's Avatar
Hellspire Hellspire is offline
 
Join Date: Oct 2003
Real name: Matthew
Mythotical, simply look up an apache module called 'mod_dosevasive' or something to that name. My host uses it, and a bunch of other modules that basically absorb, redirect or shunt DDOS attacks without any effect. That is an apache thing and is not the province of vbulletin.

In terms of blocking bots from your script, then that is something that you can do with apache htaccess files by either denying access to them, or redirecting them to a certain location.

Both of those are things you should look up on your own as they are not vbulletin. In terms of a vbulletin hack for this, I simply don't see the point? However, for security exploits, I'll let you know if I find one ;D

Zach... pray? My host contacts me and we have a nice laugh at idiots.
__________________
- M. Shockley
Riftwarp Systems Administrator
http://riftwarp.com

Last edited by Hellspire : 09 May 2005 at 04:59.
Reply With Quote
  #13  
Old 09 May 2005, 12:05
Zachery's Avatar
Zachery Zachery is offline
 
Join Date: Jul 2002
Real name: Zachery Woods
Originally Posted by Hellspire
Mythotical, simply look up an apache module called 'mod_dosevasive' or something to that name. My host uses it, and a bunch of other modules that basically absorb, redirect or shunt DDOS attacks without any effect. That is an apache thing and is not the province of vbulletin.

In terms of blocking bots from your script, then that is something that you can do with apache htaccess files by either denying access to them, or redirecting them to a certain location.

Both of those are things you should look up on your own as they are not vbulletin. In terms of a vbulletin hack for this, I simply don't see the point? However, for security exploits, I'll let you know if I find one ;D

Zach... pray? My host contacts me and we have a nice laugh at idiots.
Guess you've never been under a real DDOS. probally just one or two kids with 100 bots.
Reply With Quote
Reply


Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts
Forum Jump


New To Site? Need Help?

All times are GMT. The time now is 02:06.

Layout Options | Width: Wide Color: