there is a php file which checks the version of the crack.
i emulated the webserver and forwarded the ports to my local host. no informations are sent except for the version check of the bot itself.
i talked to noex, and he wants to have the control over the functionality of the crack. i gess it's for security reasons. he may deactivate the crack functionality with 1 click (for security reasons).
here's my local log:
127.0.0.1 - - [07/Jul/2011:07:52:25 +0200] "GET /*censored*.php HTTP/1.1" 200 15
as you can see, there's only a GET parameter. not a "POST" parameter. so he only "downloads" the version. and doesn't upload anything.
