cccam backdoor

[JohnHa]

your comment plz

[Ralleygolfg60]

Don't know what this is about cant accomplish any of this on any of my boxes and or servers?

[afc007]

your comment plz

there has been a few threads around about this i honestly dont see there is anything to worry about, there have been several linux based apps around for some years for hacking broadband wifi ( air crack )etc etc ,also im not sure what value of getting a cards serial number would be

both nds and nagravision cards for eample are quite secure from cloneing etc, if it could be done it would have been done a long time ago and someone would and still be making a lot of money ;)


found on another board

As some of you have noticed certainly support the CCcam is asleep. Since the beginning of this year, there were no new versions
and more are coming, probably no more.
Much more than the programmers a new business idea, which makes them ordendlich pockets full.

All CCcam versions of version 1.6.1 have a backdoor, which allows the server port to poll data.
We obtain for example CCcam.cfg and the data of the local maps, without which one is enabled in the config. Also available to anyone who knows the IP and port.
The programmers have written for a tool that looks for specifying a dynamic IP or DNS address and the correct server listening port, a serial number of smart cards.
delivered after the server has the data, the CCcam.cfg the server is searched for additional addresses and these are stripped of their card serial numbers.
The results can be on screen with track and write to a file.
Sun serial number, IP and date are recorded with time.

For those who are wondering what the **** is, the well is clear that hereby can earn a lot of money.
The programmers provide the tool PayTV providers and providers of encryption systems to buy, so that they can actively seek Cardsharern who share their cards over the Internet without permission.

It is clear that this tool has already found buyers.


however as pointed out in a reply

sounds like a bag of bollox to me.. CCcam 1.6.1 came out on 27 Jan 2007.. I very much doubt something like this would have been kept quiet for nearly 4 years..

Probably a bored user wondering how many times his post would be cut and pasted across the sat forums..

Wheres the evidence..??


and i would tend to agree :lol: :lol: :lol:


[attachment=0:9th02sqc]donate banner.gif[/attachment:9th02sqc]

[JohnHa]

fully agree with the author afc007, awaiting a new version of cccam

[roland.peterson]

Is it not possible that this hack exploits servers that are not properly secured? Many people run CCcam with default config meaning telnet info 16000 and webinfo 16001 ports are open with no usernames or password. This gives a wealth of information regarding your setup. I've also run across dreamboxes sharing cards on the net with port 80 exposed, also no username and password.

Apologies for attempting to revive an old thread.

[afc007]

Is it not possible that this hack exploits servers that are not properly secured? Many people run CCcam with default config meaning telnet info 16000 and webinfo 16001 ports are open with no usernames or password. This gives a wealth of information regarding your setup. I've also run across dreamboxes sharing cards on the net with port 80 exposed, also no username and password.

Apologies for attempting to revive an old thread.

No problem reviving old threads :icon-wink:

You do have a point although possibly not quiet relevant to the thread, However you are correct people who card share should all take precautions and secure with passwords on their web interfaces, for example the lines that should be within CCcam.cfg are

WEBINFO USERNAME : your-username
WEBINFO PASSWORD : your-password

[attachment=0:32ryhxji]satban1.gif[/attachment:32ryhxji]