DrDOS versus LZ (from the sightings thread)

[BOBBYGRV]

Why is it that I had to go to school with all these people. I went to school with the broads that DrDos supposedly hooks up with and JewFro lived down the st from me.

[Matt_Danger]

@tpgsr

Solid. There is only one place that it is displayed…

A quick glance finds 10 instances in the rendered HTML source of showthread.php. The version number is used as a variable in decimal throughout the codebase and is sometimes sent as a parameter.

There is an SQL injection exploit for this current version.

[boardjnky4]

lol, Matt Danger, I just noticed your Location…nerd

[LZ1]

Group messages has a sqli

[Daddie]

This went from OG drama callout to fucking huge nerd injection.

[LZ1]

@Jam

Lol. You’re such a cocksucker. Seriously, fuck you

So what are you even doing here, bro? What is your contribution to the community?

Lol

[Minglor]

@Daddie

This went from OG drama callout to fucking huge nerd injection.

I can’t decide if it’s better or worse…

[Spam16v]

I think it’s awesome LZ looks like the Sherminator.

[Minglor]

@Spam16v

I think it’s awesome LZ looks like the Sherminator.

Sherminator or LZ.

You decide.

[Studderin]

12.4? hahahahahahaha

[Freek]

@tpgsr

Solid. There is only one place that it is displayed…

I forgot the jewfro. That was the best drama thread in a long time

Do I get points for knowing what version we’re on?

[boxxa]

@Neon

Still one of the best posts in this thread.

[LZ1]

@Studderin

12.4? hahahahahahaha

On bald street tires with a 2.3-2.2? lol I think he ended up going 12.2 with a 2.2

He is putting a rear end in with a real gear and real tires shortly so who knows

---------- Post added at 08:53 AM ---------- Previous post was at 08:50 AM ----------

@Matt Danger

There is an SQL injection exploit for this current version.

I thought the SQL injection was in group messages and didn’t work correctly on here.

There was also some XSS in custom profile editing.

However I didn’t spend any real amount of time messing with it lol I could start fuzzing it with drop table;

[ultradriver10000]

@LZ

On bald street tires with a 2.3-2.2? lol I think he ended up going 12.2 with a 2.2

He is putting a rear end in with a real gear and real tires shortly so who knows

Yup and that was also the first time he has ever been on a track. He has never even owned a V8 with more then 300hp coupled to a manual trans. I’m assuming that me driving with slicks would be a solid 11.7 or better first time out cutting a 1.8 or so. I’d hope .4 in the 60’ would be at least .5s on the back end lol.

[boxxa]

@Daddie

This went from OG drama callout to fucking huge nerd injection.

@LZ

On bald street tires with a 2.3-2.2? lol

He is putting a rear end in with a real gear and real tires shortly so who knows

---------- Post added at 08:53 AM ---------- Previous post was at 08:50 AM ----------

I thought the SQL injection was in group messages and didn’t work correctly on here.

There was also some XSS in custom profile editing.

However I didn’t spend any real amount of time messing with it lol I could start fuzzing it with drop table;

The main SQL injection one is on the search and group messages feature which isn’t used here. This version has a easy DoS hole and some XSS/Open Redirect bugs but nothing wide open that someone can copy and paste code from a site as easy as the main SQL injection.

I do love me a good SQL injection hack tho.

[LZ1]

@ultradriver10000

Yup and that was also the first time he has ever been on a track. He has never even owned a V8 with more then 300hp coupled to a manual trans. I’m assuming that me driving with slicks would be a solid 11.7 or better first time out cutting a 1.8 or so. I’d hope .4 in the 60’ would be at least .5s on the back end lol.

Yea 3.73s and that cam are kinda meh also :lol:

---------- Post added at 09:26 AM ---------- Previous post was at 09:25 AM ----------

@boxxa

The main SQL injection one is on the search and group messages feature which isn’t used here. This version has a easy DoS hole and some XSS/Open Redirect bugs but nothing wide open that someone can copy and paste code from a site as easy as the main SQL injection

So your safe from DrDoS

[Neon]

vvvv

[boxxa]

^^^^ becuase of your post, Google chrome detected the page was in Thai and wanted to translate it.

@LZ

So your safe from DrDoS

:tup:

[LZ1]

Neon is an anonymous groupie

[Oasis24-7]

dinner for schmucks anyone? I think we could pull a real winner from this thread