Register Members List Search Today's Posts Mark Forums Read

Reply
 
Mod Options
vB Dummy ACP 1.0.0 Details »
vB Dummy ACP 1.0.0
Mod Version: 1.0.0, by Deceptor (Coder) Deceptor is offline
Developer Last Online: Feb 2015 I like it Show Printable Version Email this Page

vB Version: 3.8.0 RC 2 Rating: (3 votes - 5.00 average) Installs: 58
Released: 24 Dec 2008 Last Update: Never Downloads: 271
Not Supported Uses Plugins Additional Files  

vB Dummy ACP

This addon will allow you to create as many dummy acps as you like. The dummy acp acts exactly like your true admincp, but it will not allow anyone to login through it, even if the username and password provided are correct.


Features
  • Acts just like real admincp login
  • Can automatically defend against detection (explained below)
  • Won't even allow real admin logins
  • Easily create as many dummy acps as you like
  • Will work without plugins enabled (partially)


Defense Against Detection

In order for the dummy acp to be of any use, I've made it impossible to detect being a "dummy". This is done through the following methods:

1. File Check
The dummy acp checks the file being requested to see if it exists in the true admincp directory, so if a user requested dummyacp/plugin.php, they would see a login despite there being no plugin.php in the dummyacp folder. If they request a file that is not in the true admincp directory, a 404 error is shown.

2. Login Validation
You may know, that normal forum members who try to login to the acp will see the successfully logged in page, but then redirect back to the login page. The dummy acp keeps this functionality instead of completely blocking all logins. It will only show the login error page under two circumstances:

1. The login provided is actually wrong
2. The login provided is real, but an administration login


Note
While this will work without plugins enabled, if plugins are not enabled then the dummy acp will show users who login successfully with an admin login a successful login page, but -still- redirect them to the login page. So while they may not actually gain access to your admincp, someone trying to get into your forum would know your login works.

Download Now

Only licensed members can download files, Click Here for more information.

Show Your Support

  • To receive notifications regarding updates -> Click to Mark as Installed.
  • If you like this modification support the author by donating.
  • This modification may not be copied, reproduced or published elsewhere without author's permission.
Comments
  #2  
Old 24 Dec 2008, 08:45
Deceptor's Avatar
Deceptor Deceptor is offline
 
Join Date: Dec 2008
Reserved
Reply With Quote
  #3  
Old 24 Dec 2008, 09:01
dtv100's Avatar
dtv100 dtv100 is offline
 
Join Date: Apr 2007
thanks you becoming one of my favorite coder.
gone try it with 3.7.4 and report later

all that secure a website is love by me.
__________________
I say Ha HA!
find free to air information FTA Site wanna fight? fight me
Reply With Quote
  #4  
Old 24 Dec 2008, 11:19
F0xy's Avatar
F0xy F0xy is offline
 
Join Date: Mar 2008
Real name: F0xy
what a brilliant idea, thanks
__________________
Reply With Quote
  #5  
Old 24 Dec 2008, 11:42
dtv100's Avatar
dtv100 dtv100 is offline
 
Join Date: Apr 2007
so far seen to work with 3.7.4 thanks
__________________
I say Ha HA!
find free to air information FTA Site wanna fight? fight me
Reply With Quote
  #6  
Old 24 Dec 2008, 11:49
Deceptor's Avatar
Deceptor Deceptor is offline
 
Join Date: Dec 2008
Glad to hear it dtv100, I'll probably release it in the 3.7 section too then
Reply With Quote
  #7  
Old 24 Dec 2008, 15:54
Megatr0n Megatr0n is offline
 
Join Date: Jul 2007
Deceptor, what's the purpose of this hack?

I am confused.
Reply With Quote
  #8  
Old 24 Dec 2008, 15:59
Deceptor's Avatar
Deceptor Deceptor is offline
 
Join Date: Dec 2008
In short, a trick, for security

One of the things you can do to secure your vBulletin install is change the admincp/ directory to something else, so no one knows where your admincp URL is. With this, you can put up a dummy acp in its place, making people believe this dummy is the real one, and no matter what, not be able to log in
Reply With Quote
  #9  
Old 24 Dec 2008, 16:09
TheLastSuperman's Avatar
TheLastSuperman TheLastSuperman is offline
 
Join Date: Sep 2008
Real name: Michael Miller Jr
Very nice Deceptor, I was getting ready to do this:

http://www.vbulletin.org/forum/showthread.php?t=197510

And this will help! took some of the work out of it and I like how you mentioned it's pretty much untraceable as a fake... Nice!

Thanks for all the recent mods and look for an install shortly

Plus... loved to see the names Deceptor and Megatron back to back... ohh the memories of autobots and deceptacons lol! WHAT?!?!? lol
__________________
Daddy Does Dios and Figs!
https://www.linkedin.com/in/thelastsuperman

Search - Use the search feature to find similar issues/answers.
Information - Include screenshots, copy/pasted error codes, url etc.
Fixed - Please return to your thread/post and let us know how it was fixed!
Thanks - For participating! Click the "Like" on a post if someone helped you!
Reply With Quote
  #10  
Old 24 Dec 2008, 16:11
Megatr0n Megatr0n is offline
 
Join Date: Jul 2007
Originally Posted by Deceptor View Post
In short, a trick, for security

One of the things you can do to secure your vBulletin install is change the admincp/ directory to something else, so no one knows where your admincp URL is. With this, you can put up a dummy acp in its place, making people believe this dummy is the real one, and no matter what, not be able to log in
Awesome!!
Reply With Quote
  #11  
Old 24 Dec 2008, 17:10
TheLastSuperman's Avatar
TheLastSuperman TheLastSuperman is offline
 
Join Date: Sep 2008
Real name: Michael Miller Jr
Installed, 3.6.8 & Thanks
__________________
Daddy Does Dios and Figs!
https://www.linkedin.com/in/thelastsuperman

Search - Use the search feature to find similar issues/answers.
Information - Include screenshots, copy/pasted error codes, url etc.
Fixed - Please return to your thread/post and let us know how it was fixed!
Thanks - For participating! Click the "Like" on a post if someone helped you!
Reply With Quote
  #12  
Old 24 Dec 2008, 18:50
Deceptor's Avatar
Deceptor Deceptor is offline
 
Join Date: Dec 2008
Originally Posted by TheLastSuperman View Post
Very nice Deceptor, I was getting ready to do this:

http://www.vbulletin.org/forum/showthread.php?t=197510

And this will help! took some of the work out of it and I like how you mentioned it's pretty much untraceable as a fake... Nice!

Thanks for all the recent mods and look for an install shortly

Plus... loved to see the names Deceptor and Megatron back to back... ohh the memories of autobots and deceptacons lol! WHAT?!?!? lol
Haha, man, I loved Transformers as a kid. Still kinda do now.... XD
Reply With Quote
  #13  
Old 25 Dec 2008, 10:15
RHWiRED RHWiRED is offline
 
Join Date: Jun 2008
Fantastic mate. Next version should log ALL attempts with IP/email logging and forum user cross-referencing (if possible)


Also, I can confirm it works FINE on 3.7.x



Ta

Last edited by RHWiRED; 25 Dec 2008 at 10:39.
Reply With Quote
  #14  
Old 25 Dec 2008, 15:00
Hex_legend Hex_legend is offline
 
Join Date: May 2007
Haha great mod man.
Glad you got there in front of me too.
I was 95% complete with my version lol.
Reply With Quote
  #15  
Old 25 Dec 2008, 16:20
Taragon's Avatar
Taragon Taragon is offline
 
Join Date: Sep 2007
Real name: Cor
Originally Posted by Deceptor View Post
Haha, man, I loved Transformers as a kid. Still kinda do now.... XD
Same here, although that has something to do with Megan Fox as well
Thanks for the mod; looks interesting
__________________
Turning Strigoi? Vampire Academy - Bta.
Reply With Quote
Reply


Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Mod Options

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off


New To Site? Need Help?

All times are GMT. The time now is 00:54.

Layout Options | Width: Wide Color: