Bitcoin Forum

I'm giving you Bitcoins for simply notifying me of old SMF installations.

Supported Versions:
SMF 1.x branch: SMF 1.1.17 or earlier

Note: TIGSOURCE & whatifmodellers exempt.

>750 users && >1500 topics && >10000 posts: $3 in BTC
>2000 users && >3000 topics && >20000 posts: $6 in BTC
>4000 users && >6000 topics && >40000 posts: $9 in BTC
>6000 users && >9000 topics && >60000 posts: $12 in BTC
>8000 users && >12000 topics && >80000 posts: $15 in BTC
>10k users && >15k topics && > 100k posts: $20 in BTC

(you can see how many users, topics, posts a smf forum as at the bottom of the page)

For example, a forum with 4424 users, 4526 topics and 44850 posts will get $6 (the limiting factor in this example topics).

You must also supply the *userID* and *username* of an administrator. Make sure it's actually the username, not just someone's display name.

You can do this job as many times as you wish. Just PM me with links to forums, admin userid&username, and your BTC address. It's that easy.

No discussion in this thread about the purpose of this job. Any posts relating to this will be deleted.

Can you show proof that you can pay ? Even better if you escrow some given amount.

I've found one with 550 members, but it is really active. Would you pay for that?

Stats:

27xxx Posts in 3xxx Topics by 532 Members.

Already paid to rocketcoins and elena_extraordinaire

Note that duplicates will obviously not be paid (have not had a duplicate so far)

Your 550 member forum is not worth the time, sorry.

Ah ok, I've found some other. Will PM you. Maybe it's an idea to post the paid ones in your mainpost, so people won't send you duplicates.

PMed you with 1 forum. I have found more, will PM those after payment.

So how do I find these forums?

Confirmed payment received with thanks. ;D

I'm off to hopefully find some more, your OK with the format i sent it in?

Does SMF actually leak the user id and the actual login to everyone ? Or didn't you give that information ? Like if that was the biggest of their bugs..

Looks like someone is making money with an exploit...

without going into to much detail and giving away my method, yes i can see the userID without any trickery/exploit if the forum is not totally locked out. I gave oxyon all the info that was asked for.


 

So what is he doing with the forums? Hacking them?

Probably sql injection so not hacking just manipulating them to get user info..

Hence why he's after old sites not new ones

So what's my user id here ? I don't know it myself, I would try confirming with someone else. LOL, that was me being idiot. It is clearly there.

So what I'm missing is the username, as it is possible to change it in many SMF instances.

no idea sorry, just as long as he/she keeps paying that all I'm worried about.

Bump, any word from OP? I've PMed a few forums.

Yes. That's obvious.

Updates

Due to difficulties with my previous hosting provider, I have not been able to get any work done. Payments will be made in 3 days. SMF 2.x versions will not be paid (if you sent them before I removed it from the post, you will be paid).

Everyone will be paid. I am also giving bonuses to community sites over boring sites.

I just messaged you a site + the admin's user ID + name. Do reply as quickly as possible.

messaged you a site + the admin's user ID + .....

I have more 5-6 site.. but you didnt answer nothing to me.... hmmmm..!?

Same here. I have a few more forums to send but I'm waiting for the payment first.

This is how you will be paid: the guy will try to extort the forum with the info you gave him, if it succeeds you get a minor share from it, it doesn't then it will be assumed you gave bad info and is ineligible for it. Enjoy.

What are the possibilities that someone who lacks ethics regarding vulnerability exploitation would have qualms about not honoring a deal to pay out?

Made payments. Thanks. If you haven't got paid pm me again.

keep the sites coming. preferably community like sites instead of YET ANOTHER FORUM about ham radio.

Just sent a forum, waiting on payment to send you more =)!

How to find user id?

Please, have a look at you INBOX. Thx.

Send more forums!

I did not get paid yet !!!
Help me @!@!@!@!

( Both my versions were 1.1.11 )

me neither
I will have a look here, if the fish is not stinky ...

Its a good way for members to get coins
Im afraid its some hacking progress like an injection or something

$80 payment received and confirmed  ;D + $20 from the other day which i brought a $25 amazon GC with.

another PM sent  8)

Out of curiosity, are you talking about Rocky Mountain BBQ Association Forum (http://rmbbqa.org/smf/)?

sent him the forums yesterday no response yet. ::)

send pm with list of 7 forums and btc wallet address

I PM'd you several days ago with a forum that you said was great, however I still have no received my payment. Please do send it immediately.

he is looking to hack forums,and u do the job for him to find them ..lol

Or perhaps he might be a white hat hacker and contact the owners of their vulnerability and get paid for that? I don't know nor do I care. It's so simple to do a Google Dorks search anyway.

still no recevied anything!

exactly

i send pm with 7 of them but still no answer

https://bitcointalk.org/index.php?action=trust;u=147739 is available for a reason.

Maybe you sent him forums which were already PMed to him. He paid me .07 BTC. I can post the transaction ID if you want me to....

Then he must post who send what and who is paid.

user - num of forum
forum names - link
paid for num of forum

I think this is at least what we deserve

Don't anyone PM me asking how to find the forums or asking to palm the forums off to me to then palm off to oxyon. If you can't figure out how to use a search engine to find information which is publicly available I'm not going to spoon feed you. Sorry

Just so everybody knows, I Messaged him half of the forums I sourced last night, no reply or anything so far :/

if i dont get reply by monday he will get bad rep

I don't know why but I have a feeling that this guy had a hand in "Man-in-the-middle" attack.
I saw he was active hours before forum went down.

Could do this all day bro! Sent over quite a few sites.

And yet another scammer......

And all of u helped him  ;)

Scammer
Spammer
Lam ... ;D

Can't you just come with something meaningful from yourself than robbing people with exploit which you did not write? If you can't scan for what you are looking for and can't write own exploit you are just a looser.