Hack Forums
[TuT] Easiest Way to Hack Sites [Skiddish] - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: [TuT] Easiest Way to Hack Sites [Skiddish] (/showthread.php?tid=1873544)

[TuT] Easiest Way to Hack Sites [Skiddish] - zer0pwn - Oct 30, 2011

Hey there. This tutorial is pretty basic, and really short. I will explain it though.

Okay, so first off. People upload their shell to a site right? Maybe a c99 Shell, GNYShell, etc. Most people are stupid enough, to keep their shell's in plain-view. So we can use google, to search for them. Most of the shells aren't password protected either.

Ever used "inurl:" on google before? If you've used XSS or SQLi, you should know a lot about inurl.

Inurl searches for whatever you ask IN THE URL. Example:

inurl:LULZ

That will try to find all the URLs that have "LULZ" in them. So we are going to use Inurl, to find people's shells that have already been uploaded.

Simply put this in google:

Code
inurl:GNYShell.php

Code
inurl:shell.php

Code
inurl:c99.php

Code
inurl:c99shell.php

Code
c100.php

Code
c100shell.php

Code
jackall.php

You can use any of those dorks to find the shells. Once you're in the shell, you can upload your own Files, deface the index, or root the server. All shells are different.

Now, this method is very Skiddish. I've never personally used it, but this morning the idea came to my head so I tried it, and it worked. I don't reccomend using this method, but if you really feel like defacing, or letting out some personal anger on a site, go ahead.

Enjoy :)

* - Jac0yyx - Oct 30, 2011

It seems kinda obvious to me but this is indeed pretty useful when you want to hack a random site without spending any time finding a vulnerability, file upload, etc...

* - TheLawy - Oct 30, 2011

soo how would I use this? I want to take down some websties

* - NarrowDioxin - Oct 30, 2011

Google has always been a hacker's best friend always. Believe it or not

* - Jac0yyx - Oct 30, 2011

(Oct 30, 2011 07:39 PM)NarrowDioxin Wrote:  Google has always been a hacker's best friend always. Believe it or not
Agreed, dorks are SO useful.
Really, you can use them to automatically SQL inject websites(though that takes the fun out of it, right?)

* - sn.root - Oct 31, 2011

nice share , I've tried with these dorks , Google don't search the updated shells, all are just hackers' fake shell .

* - Alienguy - Nov 1, 2011

:Hehe:
lol
I never thought of this.
Nice share.
But many are password protected .

* - HaxOr❤ - Nov 1, 2011

Yea well you will get sites 100 years old because they were raped via that shell so no use of them.

Better search for keywords in shell like GNY shell

intitle:Social working - Google Search

* - Airon - Nov 1, 2011

Dont find shelled site's ?
only shit about shell's .

Oke now i found some site's :D
thanks man!

* - TheDuBsTepDealer - Nov 1, 2011

Haha lol, me too i cant find a shelled page.