Raging the web since 2010.

AutoBullet is a tool that allows you to register with vBulletin forums quickly. You only need to specify the URL, a password, and complete the CAPTCHA image.

Instructions:

1. Enter the forum URL (e.g. http://somesite.com/forum/) in the top text box
2. Click the “Register” button.
3. Choose a password.
4. Complete the CAPTCHA by entering the text displayed into the text box provided.
5. Click the “Validate” button.
6. Wait 10 seconds.
7. Click the “Activate” button.
8. Your account is created! You can now log in.

This tool is in beta and has some limitations!
Any additional CAPTCHA or human-verification methods aren’t taken into account. It will also not work with certain plugins or addons. It will not work for our forums either, since we block signups that use Mailinator email addresses. I have tested this with several forums running different plugins, languages and versions, and so far it seems to work 90% of the time.

Latest updates
05/02/2010 – Version 0.6 Beta released
This tool is now compatible with some version 3.x.x boards, and may be compatible with certain version 2.x.x boards. Version detection has been improved. A bug that caused the “Activate” button to become enabled when the CAPTCHA was entered incorrectly was fixed. In the next release I will add fallbacks for version detection when no version information is displayed on the page.

Why does this tool ask for admin privelidges?
Depending on your OS, this tool might ask for admin privelidges. By default, the .NET framework’s HTTP classes expect the target server to support HTTP Continue, and therefore send a header specifying that the server must allow it. Since some web servers do not support HTTP Continue, this causes an exception to be thrown when we try to contact such a server. In most applications, we don’t need to use HTTP Continue. Unfortunately, the only way to stop the Expect header from being sent is to set Expect100Continue to false using the .NET Service Point Manager. Alterations to the service point manager require administrator privelidges. I’m not entirely sure why Microsoft chose to set Expect100Continue to true by default, when they could have set it to false and then thrown an exception if the developer attempted to use the HTTP Continue feature.

Future updates:

• Forum URL list for mass-signup
• Sign up many accounts on one website
• Ability to customise username
• Compatibility with vBulletin version 3.x.x
• Better error handling
• Integration with DeCaptcher

Download
Forum Thread

DorkFind is a tool that searches Google for vulnerable pages based on a set of criteria you provide.

Example usage: To find all forums running vBulletin v3.5.4, enter “forum.php” in the first text box, “Powered by vBulletin Version 3.5.4″ in the second text box, choose where to write the URLs to and click ‘Begin’. The program will save all URLs to the file, one per line.

Options: You can fake HTTP_X_FORWARDED_FOR and HTTP_CLIENT_IP by checking the appropriate boxes. You can also add random jargon to the query (that doesn’t affect the result) in order to make recognition of bad queries harder.

Known limitation: If you try using this tool too often, Google will blacklist your IP address for automated queries. This will result in a message box showing in the program, telling you about a 503 error. You can sometimes resolve this by searching for similar terms in your browser and completing the CAPTCHA check, but other times you just have to wait an hour and retry.

Source: Since this application contains some bits of code I’ve written for personal use only, it will remain closed source for the foreseeable future. Don’t bother trying to reverse engineer any of the source, I used a decent obfuscator.

Disclaimer: This is for educational purposes only. Its use is your responsibility, and as such you agree not to hold the maker of the software liable for any loss, damage or other consequences of the use of this software. If for some insane reason this code blows your PC up, it’s your fault for running it and not mine for writing it.

Enjoy!

Download