+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: Need help with defacement (on a Mac) (/showthread.php?tid=1246389)
Need help with defacement (on a Mac) - myronganes - Apr 26, 2011
all of the tutorials on this site for defacement and shells, the shell files are all RAR, which I can't use;furthermore, I have searched google and can't find ones for mac. Is it possible to find tools and shells used for defacement on a mac?
* - orestis - Apr 26, 2011
Shells --> http://www.ismokeweed.info/shells/
On a MAC you can do manual SQL injection ;)
* - myronganes - Apr 26, 2011
(Apr 26, 2011 11:33 AM)orestis Wrote: Shells --> http://www.ismokeweed.info/shells/
On a MAC you can do manual SQL injection ;)
Thanks man, can you direct me to a guide or something for manual SQL injection? I'm pretty good with SQLI when it comes to extracting information from a site that I need, but dont know defacement commands or how to upload the shell. and then once shell is uploaded what to do from there.
* - Bean Dip - Apr 26, 2011
(Apr 26, 2011 11:36 AM)myronganes Wrote: Thanks man, can you direct me to a guide or something for manual SQL injection? I'm pretty good with SQLI when it comes to extracting information from a site that I need, but dont know defacement commands or how to upload the shell. and then once shell is uploaded what to do from there.
Rar Client for mac
For you bra
* - myronganes - Apr 26, 2011
(Apr 26, 2011 11:37 AM)Noid Wrote: Rar Client for mac
For you bra
thanks ! Not sure why I wasn't able to find something like that.
* - orestis - Apr 26, 2011
(Apr 26, 2011 11:36 AM)myronganes Wrote: Thanks man, can you direct me to a guide or something for manual SQL injection? I'm pretty good with SQLI when it comes to extracting information from a site that I need, but dont know defacement commands or how to upload the shell. and then once shell is uploaded what to do from there.
Mate, you need to sqli inject a website, get the database ADMIN username & password, login to admin panel and then upload the shell from there ;)
* - myronganes - Apr 26, 2011
(Apr 26, 2011 11:57 AM)orestis Wrote: Mate, you need to sqli inject a website, get the database ADMIN username & password, login to admin panel and then upload the shell from there ;)
can someone clarify exactly what a shell is doing>? I thought uploading a shell was the method when you didn't have admin access and then you would upload shell through site, and 'root' the server /find a backdoor. not exactly sure, im new to all this.
If you had admin access why would you need to upload a shell? is it so that you can access site anytime you want without login or something?
* - orestis - Apr 26, 2011
(Apr 26, 2011 12:11 PM)myronganes Wrote: can someone clarify exactly what a shell is doing>? I thought uploading a shell was the method when you didn't have admin access and then you would upload shell through site, and 'root' the server /find a backdoor. not exactly sure, im new to all this.
If you had admin access why would you need to upload a shell? is it so that you can access site anytime you want without login or something?
A shell is something that executes commands and uploads files without any restrictions on a server. It can be used to do malicious jobs such as Root the server, back-connect and such ;)
You must upload the shell via the ADMIN Panel ;)
* - Pun - Apr 26, 2011
Check out this website I've defaced, take the deface page and then edit the information according to your needs. http://view-source:http://joomlachat.org if you need anymore help pop me a PM.