AN ALARM CALL TO THE COMUNITY!

[elconejotres]

Hi guys I want to everybody here check this page and please report it to make' em shut it down their "bussines"

 

xmugenfightingxtreme.com

 

They are selling (well they call it "donation for download") Xmugen packages and Emulators for the xbox, these jerks claim in their forums that THEY DEVELOP the xmugen packages and emulators, THEY ARE EVEN SELLING MK PROJECT 4.5 FOR THE XBOX, but the top of the shame and cinism was in a private message, one of this "administrators of the site" asshole TRIED TO SELL ME VIA PAYPAL FINAL BURN LEGENDS and COINOPS R3!!!!! check it out and please report the website

Edited May 26, 2010 by Robert

[PhilExile]

Hmmm, I think it would be better to leave this alone. (AKA, don't report them) Its good that you are calling attention to their activities here and, I assume, at other forums. If people are dumb enough to fall for this, that's their problem. Good looking out though.

 

Also, did you get in touch with Madmab regarding your issues with the PCE CD emulator? I know he is working on it. Check out this forum topic:

 

http://forums.xbox-scene.com/index.php?sho...712115&st=0

Edited May 26, 2010 by PhilExile

[Punika]

it´s up on you

 

 

=======================================================================
=================                  
| # Title    : Simple Machines Forum 1.1.11 Mullti Vulnerability   
| # Author   : indoushka                                                               
| # email    : indoushka@hotmail.com                                                   
| # Home     : www.sec-war.com                                                                     
| # Web Site : [url="http://www.simplemachines.org/"]http://www.simplemachines.org/[/url]                                                   
| # Dork     : Powered by SMF 1.1.11 | SMF � 2006-2009, Simple Machines LLC                                                                                                              
| # Tested on: windows SP2 Fran�ais V.(Pnx2 2.0) + Lunix Fran�ais v.(9.4 Ubuntu)       
| # Bug      : Mullti                                                                     
======================      Exploit By indoushka       =================================
# Exploit  :  

1- Mail List information : 

After Register go to : [url="http://127.0.0.1/smf/index.php?action=mlist"]http://127.0.0.1/smf/index.php?action=mlist[/url]

2- PHPSESSID session fixation:
Vulnerability description
This script is vulnerable to PHPSESSID session fixation attacks.

By injecting a custom PHPSESSID is possible to alter the PHP session cookie. Attackers will normally manipulate cookie values to fraudulently authenticate themselves on a web site.
This vulnerability affects /smf. 
The impact of this vulnerability
By exploiting this vulnerability, an attacker may conduct a session fixation attack. In a session fixation attack, the attacker fixes the user's session ID before the user even logs into the target server, thereby eliminating the need to obtain the user's session ID afterwards.

Attack details :

GET /smf/?PHPSESSID=smfssionfixation 

How to fix this vulnerability
Set session.use_only_cookies = 1 from php.ini. This option enables administrators to make their users invulnerable to attacks which involve passing session ids in URLs; defaults to 0.

Web references :

[url="http://www.acros.si/papers/session_fixation.pdf"]http://www.acros.si/papers/session_fixation.pdf[/url]

[url="http://www.php.net/session"]http://www.php.net/session[/url]

[url="http://www.owasp.org/index.php/PHP_Top_5"]http://www.owasp.org/index.php/PHP_Top_5[/url] 


Dz-Ghost Team ===== Saoucha * Star08 * Redda * Silitoad * n2n ==========================================
Not : Please I need financial assistance in order I make a tax to the 
state treasury before the ruling, final and unconditional access 
my release by mail and transportation Algerian approximately 500 U.S. dollars
ccp:0013791941 Salah Eddine Nekaa
--------------------------------------------------------------------------------------------------------

[elconejotres]

Hmmm, I think it would be better to leave this alone. (AKA, don't report them) Its good that you are calling attention to their activities here and, I assume, at other forums. If people are dumb enough to fall for this, that's their problem. Good looking out though.

 

Also, did you get in touch with Madmab regarding your issues with the PCE CD emulator? I know he is working on it. Check out this forum topic:

 

http://forums.xbox-scene.com/index.php?sho...712115&st=0

 

Yeah maybe you're right, thanks for the tip I didn't know of the pce emu been worked I will contact madmab assap thanks again

[PhilExile]

Ya, Madmab is a very nice guy. Just be clear in your documentation of your experience in order to help him isolate the bugs.

[Nextel]

Hi guys I want to everybody here check this page and please report it to make' em shut it down their "bussines"

 

xmugenfightingxtreme.com

 

They are selling (well they call it "donation for download") Xmugen packages and Emulators for the xbox, these jerks claim in their forums that THEY DEVELOP the xmugen packages and emulators, THEY ARE EVEN SELLING MK PROJECT 4.5 FOR THE XBOX, but the top of the shame and cinism was in a private message, one of this "administrators of the site" asshole TRIED TO SELL ME VIA PAYPAL FINAL BURN LEGENDS and COINOPS R3!!!!! check it out and please report the website

 

Look at it alittle closer. Some of those games you have to donate to get but most of them are

free and can be used very easily. Or just use the screenpack itself if you want. I"ve had no

issues with those guys at all, always helped me out. But atleast some people are keeping Xmugen alive and

doing a better job at it than anyone else i've seen so far.

[BritneysPAIRS]

...I bet they soon sell ShowROOM......I dont care personally....its not my fight.....there are soooooo many people who have done this stuff though time.....people just pay for the package and to save time for the newbes....if they have friends it would be done for them....

 

I think people spend so much time in fights these days and not enough time helping things move forward......most peoples stuff is free and if you can sell ice to eskimos then good on them....try and educate the eskimos or even try and help open source move forward and look forward....alot of issues lie with people and there will allways be issues with people, just move forward in life....

[elconejotres]

...I bet they soon sell ShowROOM......I dont care personally....its not my fight.....there are soooooo many people who have done this stuff though time.....people just pay for the package and to save time for the newbes....if they have friends it would be done for them....

 

I think people spend so much time in fights these days and not enough time helping things move forward......most peoples stuff is free and if you can sell ice to eskimos then good on them....try and educate the eskimos or even try and help open source move forward and look forward....alot of issues lie with people and there will allways be issues with people, just move forward in life....

 

 

Yeah man you're right, there is better things to do than fight, just any of you if you are reading this don't fall in the trap and now lets get some bussines with madmab and the pce emulation

[PhilExile]

I think people spend so much time in fights these days and not enough time helping things move forward......most peoples stuff is free and if you can sell ice to eskimos then good on them....try and educate the eskimos or even try and help open source move forward and look forward....alot of issues lie with people and there will allways be issues with people, just move forward in life....

 

Very well put

[Alpha]

What a great business model lol... it's probably a 15 year old kid or something thinking he's going to make a ton of cash

[ressurectionx]

Personally, I feel that nobody should be trying to make any money doing any of this, even based off of donations.

 

Not only does it make the community as a whole look bad, but it even makes the work that people have previously done with no financial incentive look like part of a Pirating for Profit organization.

 

 

I'm not going to pursue it personally, but I do believe that the original poster is right and that these people should be shut down if they don't remove the donation option from their project.