ChicagoVPS / CVPS Hacked. New SolusVM exploit? (Content Restored) [PT. 1/2]
- Thread starter Magiobiwan
- Start date
-
- Tags
- chicagovps cvps exploit solusvm
- Status
Have shut down Solus also in light of things for now.
This is what happens when you don't have good security.
Now, where shall I release more zero day vulnerabilities
?
If you search hard enough you'll find I released a zero-day on the admin login page which allowed the use of eval() which you could easily compromise server from it. I've only released it to show how SHITTY solusvm is.
They don't properly clean the submitted data.
Now, where shall I release more zero day vulnerabilities
?If you search hard enough you'll find I released a zero-day on the admin login page which allowed the use of eval() which you could easily compromise server from it. I've only released it to show how SHITTY solusvm is.
They don't properly clean the submitted data.
Last edited by a moderator:
vanarp
Active Member
When did you release it?
As I stated in a lowendbox post, I was going to release it in 8 hours from when I posted yesterday, and I did.
Jack
Active Member
Want some advice?
Stop wasting your time on a control panel as that
will soon turn into
Want some advice?Want some advice?
Stop wasting your time on a control panel as thatwill soon turn into
doesn't scare me.
What are they going to do, sue me for helping them get better security? I already attempted to contact them, they failed to do anything.
Jack
Active Member
You know what you've done to CVPS?Want some advice?
doesn't scare me.
What are they going to do, sue me for helping them get better security? I already attempted to contact them, they failed to do anything.
If you don't have Solus on your arse, I'm sure Chris is going to want words at a minimum with you.
Jack
Active Member
You know what you've done to CVPS?Want some advice?
doesn't scare me.
What are they going to do, sue me for helping them get better security? I already attempted to contact them, they failed to do anything.
If you don't have Solus on your arse, I'm sure Chris is going to want words at a minimum with you.
Have you considered running a script to see if httpd is down, if it is start it up?
Have you considered running a script to see if httpd is down, if it is start it up?
I STRONGLY suggest you contact them again, i.e. immediately, with whatever information you have.
I STRONGLY suggest you contact them again, i.e. immediately, with whatever information you have.
What I've done? Its nothing illegal. I never hacked CVPS.
What I've done? Its nothing illegal. I never hacked CVPS.
Maybe we should stop twittling our thumbs and do something about it?
The following code has been obfuscated for solusvms security:
Maybe we should stop twittling our thumbs and do something about it?
The following code has been obfuscated for solusvms security:
- Status