Hack Forums
[TuT] Hacking a Website (must see) [TuT] - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Beginner Hacking (https://hackforums.net/forumdisplay.php?fid=4)
+----- Forum: Hacking Tutorials (https://hackforums.net/forumdisplay.php?fid=47)
+----- Thread: [TuT] Hacking a Website (must see) [TuT] (/showthread.php?tid=418253)

Pages: Pages 1 2 3 4 5 6 7 8 9 10 11 12


* - rooflez - Jul 16, 2010

Thanks A LOT BRO.

Really, this is soo helpful.


* - Phizo - Jul 16, 2010

This wouldn't work though, FTP Clients all have usernames and passwords, if you brute force it or try to crack it, they will contact your ISP.

EDIT: Missed this "Once you’ve got the banner, you need to search for vulnerability matching with banner."


* - wargod97 - Jul 16, 2010

TelNet is available in win 7 but you need to activate it.

I have it on windows 7 and i googled(because i forgot how to do it :( )
run as administrator command prompt type this command
pkgmgr /iu:TelnetClient

i tried this and it worked for me


* - Phizo - Jul 16, 2010

Fuck telnet, Netcat ftw guyz <3.


* - ahsanciit - Jul 16, 2010

got no responce in nmap...hlp me...


* - VIRUS-11 - Jul 26, 2010

explain this point plzz.... :)

Once you’re done download, install & open Nmap.
Once you have done that, do a –sT –sV scan of the website.
[That is put, nmap –sT –sV, in Nmap’s command bar & scan website.]
Once done, observe open OS, ports, services running on the website server.]


* - Prank Calling - Jul 26, 2010

Nice TuT man this looks good.


* - !nc0gn370 - Jul 26, 2010

No offense or anything...

Telnet hacking is fairly old and oftentimes you don't get any OS/software information after telneting to the open ports.

I try this from time to time and it can be quite frustrating.

Moral of the story: don't get your hopes up. It's harder and less reliable than it sounds.

Other than that, this is a good tutorial - too bad I can't +rep.


* - amiel - Jul 26, 2010

how can i inject the kelogger on the website. ? Help me. . .


* - byteh4ck - Jul 26, 2010

i dont get:

Once you’re done download, install & open Nmap.
Once you have done that, do a –sT –sV scan of the website.
[That is put, nmap –sT –sV, in Nmap’s command bar & scan website.]
Once done, observe open OS, ports, services running on the website server.]


* - !nc0gn370 - Jul 27, 2010

(Jul 26, 2010 10:41 PM)byteh4ck Wrote:  i dont get:

Once you’re done download, install & open Nmap.
Once you have done that, do a –sT –sV scan of the website.
[That is put, nmap –sT –sV, in Nmap’s command bar & scan website.]
Once done, observe open OS, ports, services running on the website server.]

You don't have to use nmap (although it can provide you with a tad more information). You can really just use any port scanner - just google "Port Scanner" and you're bound to find something (if not, just PM me and I'll send you one).

👍


* - smit - Jul 27, 2010

Rally too much nice tutorial

Thanx for sharing with us !!!🤗🤗


* - beyondgodlike23 - Sep 11, 2010

nice but i can use nmap.... every time i scan it keeps telling me this

Code
WARNING: Using raw sockets because ppp0 is not an ethernet device. This probably won't work on Windows.

pcap_open_live(ppp0, 100, 0, 2) FAILED. Reported error: Error opening adapter: The system cannot find the device specified. (20).  Will wait 5 seconds then retry.

pcap_open_live(ppp0, 100, 0, 2) FAILED. Reported error: Error opening adapter: The system cannot find the device specified. (20).  Will wait 25 seconds then retry.

Call to pcap_open_live() failed three times. There are several possible reasons for this, depending on your operating system:

LINUX: If you are getting Socket type not supported, try modprobe af_packet or recompile your kernel with SOCK_PACKET enabled.

*BSD:  If you are getting device not configured, you need to recompile your kernel with Berkeley Packet Filter support.  If you are getting No such file or directory, try creating the device (eg cd /dev; MAKEDEV <device>; or use mknod).

*WINDOWS:  Nmap only supports ethernet interfaces on Windows for most operations because Microsoft disabled raw sockets as of Windows XP SP2.  Depending on the reason for this error, it is possible that the --unprivileged command-line argument will help.

SOLARIS:  If you are trying to scan localhost or the address of an interface and are getting '/dev/lo0: No such file or directory' or 'lo0: No DLPI device found', complain to Sun.  I don't think Solaris can support advanced localhost scans.  You can probably use "-Pn -sT localhost" though.

QUITTING!

help


* - Oz. - Sep 12, 2010

love it 10/10 thanks for posting this.


* - delta5 - Sep 13, 2010

i was try method sql injection . .and done . .
thnx . .i want learn more