- May 24, 2018
- 75,064
- 111,714
- 120
Perfex - Powerful Open Source CRM By MSTdev v3.2.1
- Thread starter comcpa2022
- Start date
-
Welcome to Original Babiato! All Resource are Free and No downloading Limit.. Join Our Official Telegram Channel For updates Bypass All the resource restrictions/Password/Key? Read here! Read Before submitting Resource Read here! Support Our Work By Donating Click here!
- May 24, 2018
- 75,064
- 111,714
- 120
Tomz updated Perfex - Powerful Open Source CRM with a new update entry:
Perfex CRM v2.8.2
Read the rest of this update entry...
Perfex CRM v2.8.2
Read the rest of this update entry...
ursofiul
New member
- Nov 18, 2020
- 23
- 23
- 3
tribikramsahu
New member
- Apr 25, 2020
- 24
- 4
- 3
Dear @Tomz or @NullMaster Can anyone provide the nulled version of "
Timesheets and Leave Management for Perfex CRM ?
Thanks a lot in advance
Timesheets and Leave Management for Perfex CRM ?
Thanks a lot in advance
tribikramsahu
New member
- Apr 25, 2020
- 24
- 4
- 3
@Tomz
Please recheck this as it has a backdoor. Its in the SURVEYS Module that comes default with the script.
It will generate a file called k.php That will run php scripts at will.
EG This isnt the correct version of this file. It is altered. modules/surveys/vendor/phpoffice/phpspreadsheet/.phpcs.xml.dist
/vendor/markbaker/matrix/infection.json.dist
Also creates a makefile.php. Wiped out 1 of our servers yesterday. I narrowed it down to that as this script was all that was on it.
KevDev was one of the handles.
Please recheck this as it has a backdoor. Its in the SURVEYS Module that comes default with the script.
It will generate a file called k.php That will run php scripts at will.
EG This isnt the correct version of this file. It is altered. modules/surveys/vendor/phpoffice/phpspreadsheet/.phpcs.xml.dist
/vendor/markbaker/matrix/infection.json.dist
Also creates a makefile.php. Wiped out 1 of our servers yesterday. I narrowed it down to that as this script was all that was on it.
KevDev was one of the handles.
Last edited:
pcintav
Active member
- Oct 8, 2018
- 214
- 102
- 43
The surveys, backup, goals, theme_style & menu_setup are premodules and served by Perfex with every update...doesnt matter if they r updated or not.
I rechecked all premodules from 2.4.4 on. Is it possible that u dont update the modules folder ?
Last dev update in the survey module was on 2.8.1 and before it was 2.5.1 !
The provided versions 2.8.1 and 2.8.2 r clean !
Otherwise, is it possible that ur structure was open in any way so someone could add malicious files ? Just a thought.
Sorry what happened to your server.
No those files are in the file downloaded from Babiato. I actually just deleted the ENTIRE [SURVEYS] folder and it doesn't happen anymore. Was using like 75% of my server before I found / deleted the trigger files - it and then he [the hacker] wiped it entirely out in response.. Again be careful with that. I am not complaining [as I fixed the issue] I am just giving a heads up. It had absolutely nothing do with that @Efacid but all good. Its a sleeper. You can see the code in the downloaded files. [SURVEYS] folder. This obv isnt the dev as no dev would wipe out an entire server in response to that. And it was actually triggered after we loaded a bunch of leads - like 1000+ from an excel sheet. I saw in the server records. [DevMike] was the handle.
We reinstalled all - deleted that folder for now - and all works PERFECT with no more issues [even after upload]
We reinstalled all - deleted that folder for now - and all works PERFECT with no more issues [even after upload]
Last edited:
guguk
Well-known member
No those files are in the file downloaded from Babiato. I actually just deleted the ENTIRE [SURVEYS] folder and it doesn't happen anymore. Was using like 75% of my server before I found / deleted the trigger files - it and then he [the hacker] wiped it entirely out in response.. Again be careful with that. I am not complaining [as I fixed the issue] I am just giving a heads up. It had absolutely nothing do with that @Efacid but all good. Its a sleeper. You can see the code in the downloaded files. [SURVEYS] folder. This obv isnt the dev as no dev would wipe out an entire server in response to that. And it was actually triggered after we loaded a bunch of leads - like 1000+ from an excel sheet. I saw in the server records. [DevMike] was the handle.
We reinstalled all - deleted that folder for now - and all works PERFECT with no more issues [even after upload]
I was used old version and i deleted to all files because installing for new version but i have doubt now. What should i do?
babidodo
New member
- Jan 12, 2021
- 16
- 8
- 3
Can u suggest if this script can be used as it is? Will it create issues?No those files are in the file downloaded from Babiato. I actually just deleted the ENTIRE [SURVEYS] folder and it doesn't happen anymore. Was using like 75% of my server before I found / deleted the trigger files - it and then he [the hacker] wiped it entirely out in response.. Again be careful with that. I am not complaining [as I fixed the issue] I am just giving a heads up. It had absolutely nothing do with that @Efacid but all good. Its a sleeper. You can see the code in the downloaded files. [SURVEYS] folder. This obv isnt the dev as no dev would wipe out an entire server in response to that. And it was actually triggered after we loaded a bunch of leads - like 1000+ from an excel sheet. I saw in the server records. [DevMike] was the handle.
We reinstalled all - deleted that folder for now - and all works PERFECT with no more issues [even after upload]
thanx for the heads upWe just actually bought Perfex - to get that back [surveys main mod] - and that added code is not there.
guguk
Well-known member
You dont need that ofcourse but if you share with us we glad to be that.We just actually bought Perfex - to get that back [surveys main mod] - and that added code is not there.
- May 24, 2018
- 75,064
- 111,714
- 120
Similar threads
