PlusEMU Security issue?

[Dan822]

Recently my hotel has suffered a couple of attacks where a user has managed to rank themselves and cause havoc. Yesterday after we was attacked the attcker said you shouldnt use plus emu.

Does anybody know about any vuntabilities with plus?


Cheers

 

[Jerry]

SSO ticket exploit...?

 

[chiefqueef]

happened to me last night aswelll are u using brain

 

[Joshie]

It might not be your emulator, it could be your cms being exploitable.
 
What CMS do you have?

 

[chiefqueef]

i use brain i think ts cos the accounts he was using have null auth tickets idk how to fix tht i tried usin crigs fix locally but i just get dced at 100%

 

[JayC]

i use brain i think ts cos the accounts he was using have null auth tickets idk how to fix tht i tried usin crigs fix locally but i just get dced at 100%

Personally, I like this tutorial.

You must be registered for see links

This will prevent SSO tickets from being null as the sso goes into a separate table when the emu gets loaded, and then deletes itself after verification.

 

[chiefqueef]

Personally, I like this tutorial.

You must be registered for see links

This will prevent SSO tickets from being null as the sso goes into a separate table when the emu gets loaded, and then deletes itself after verification.

i was able to follow tht fix up untill it got the the php as this was for rev and im using brain do you know how id go about using tht php code with brain

 

[JayC]

i was able to follow tht fix up untill it got the the php as this was for rev and im using brain do you know how id go about using tht php code with brain

Find the function that sets the SSO and change the syntax of the queries to match brain?

 

[Yoshi]

Find the function that sets the SSO and change the syntax of the queries to match brain?

When following this it causes my revcms not to load?

 

[Dan822]

happened to me last night aswelll are u using brain

nah mate i'm using RevCMS (i'm p sure its secure) and PlusEMU.
 

It might not be your emulator, it could be your cms being exploitable.
 
What CMS do you have?

I don't think the CMS is a issue but i'm looking into things.
 
Thanks to everybody for your replies btw appreciate it!