Topic: cryptsy - page 2. (Read 32329 times)
Ill check the files and see whats up.
Just went through some source code files and found this part. 
Your IP is logged
please visit our friends here ..
http://www.fbi.gov/"> http://www.fbi.gov/
you should not visit this page...,
Your IP is logged
please visit our friends here ..
http://www.fbi.gov/"> http://www.fbi.gov/
Yeah, i saw that as well lol
Just went through some source code files and found this part.
Your IP is logged
please visit our friends here ..
http://www.fbi.gov/"> http://www.fbi.gov/
you should not visit this page...,
Your IP is logged
please visit our friends here ..
http://www.fbi.gov/"> http://www.fbi.gov/
I would be interested. Did you get the files somewhere. I know that a few people downloaded the script. It would be nice if they could share it with others.
If anyone has the files and are willing to work with us we would be happy to fix the code a push an updates with no holes.
If anyone has the files and are willing to work with us we would be happy to fix the code a push an updates with no holes.
Have you got the script and can you share for us?
If anyone has the files and are willing to work with us we would be happy to fix the code a push an updates with no holes.
Yeap, it seems he took it offline. Maybe too much security holes and flaws in the script.
Hey OP? link to source code is broken?
Hey OP? link to source code is broken?
I know it some time ago of you post but could you point to the files and lines where you find these vulnerabilities?
multiple SQL injection vulnerabilities.
this is not anywhere close to professional.
this is not anywhere close to professional.
Hi ,thank you
i will let know some honest people about your work,ifanybody will be intersted in to run exchange,i will let you know.You really deserve to get some money,maybe in some future will be possible to make a kind of decantrelised ,secure exchange on that base
i will let know some honest people about your work,ifanybody will be intersted in to run exchange,i will let you know.You really deserve to get some money,maybe in some future will be possible to make a kind of decantrelised ,secure exchange on that base
Your link is showing not found,i sent you pm
https://github.com/crypto-maniac/Cryptsy-Clone
Hi ,thank you
i will let know some honest people about your work,ifanybody will be intersted in to run exchange,i will let you know.You really deserve to get some money,maybe in some future will be possible to make a kind of decantrelised ,secure exchange on that base
i will let know some honest people about your work,ifanybody will be intersted in to run exchange,i will let you know.You really deserve to get some money,maybe in some future will be possible to make a kind of decantrelised ,secure exchange on that base
Well, i would still like to know if someone installed and run the script in production?
Has someone already installed the script? Is it working the way the creator is promising?
This is not an open source entirely because someone still need to pay 0.50btc to activate it to full version which include voting and chatting stuffs but is that price negotiable and do you offer free installations?
I would like to have this running on my site if there are no backdoors
I would appreciate some help from anyone to get this on a domain if all is ok
I would appreciate some help from anyone to get this on a domain if all is ok
Has someone already installed the script? Is it working the way the creator is promising?
Thx you R3wt of course i will accept your your pull request
multiple SQL injection vulnerabilities.
this is not anywhere close to professional.
this is not anywhere close to professional.
thx you R3wt for these words ....
its definly more easy to run scanner from Kali ,instead code from scratch this open source exchange
you cannot sweep the work just for some basic (important also) security breach
also as i said exploit need POC so please if you can report and show it would be a good contribution at least
you wont find LFi/RFi here , maybe an xss or sql injection as u find
as other members remind it is open source and i didnt recommend to anyone here or via PM to run the site straigh like this
it flow from sense that if you like to run an exchange you must pay a DEV and security guy (a real one..)
i would recommend to also change request $GET to $POST
Looking through your source code, i found many of the same vulnerabilities that were in the original OpenEx scripts that i cowrote(In fact, some of the code is copied directly from OpenEx source code). To put it into perspective, i had no idea what i was doing back then(first experience with programming, delusional about my abilities). I do now:
https://github.com/OpenExLLC/web -- No Release candidate yet
https://github.com/OpenExLLC/live --0.1 Release
https://github.com/OpenExLLC/mail -- Release Candidate is untested
This exchange will be scalable, secure, and just generally awesome. If anyone wants to join this effort, you're more than welcome to. There are other components to the system, however these are the only ones i've made public at this time, Mostly because some are yet to be implemented or are waiting on other things to be completed so they can be tested.
multiple SQL injection vulnerabilities.
this is not anywhere close to professional.
this is not anywhere close to professional.
thx you R3wt for these words ....
its definly more easy to run scanner from Kali ,instead code from scratch this open source exchange
you cannot sweep the work just for some basic (important also) security breach
also as i said exploit need POC so please if you can report and show it would be a good contribution at least
you wont find LFi/RFi here , maybe an xss or sql injection as u find
as other members remind it is open source and i didnt recommend to anyone here or via PM to run the site straigh like this
it flow from sense that if you like to run an exchange you must pay a DEV and security guy (a real one..)
i would recommend to also change request $GET to $POST
I will clean up some of the security holes and submit pull requests if you would like me to?
Amazing. I still have to crawl through the code to see if it truly is malware-free and not an attempt to harm, but if you honestly did release this Open source and clean to us, a lot of people could take a lesson from you as this is no small feat.
Thank you.
Thank you.
Jump to: