+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: [TUTORIAL] How to hack a targeted website [Noob Friendly] (/showthread.php?tid=2832327)
[TUTORIAL] How to hack a targeted website [Noob Friendly] - HaxOr❤ - Sep 2, 2012
Hello Hackforums.
Since lot of you are new to this section i'm gonna show you how to hack your targeted website.
This is not easy to do but i will try to explain as much as i can.
Things we will need:
1) Target website
2) PHP shell (I use WSO)
3) Symlink script (I will provide that at the end)
4) MySQL manager
Chapter I
Now, when you checked your site and it has no vulnerable points you are pretty much screwed, right?
There is one thing left.
We can hack into the same website on the same server (I know that this sounds wierd to you but you will see why in a minute)
So we have our target website URL and now we must find out the IP.
We go to the Start -> CMD and type:
Code
ping www.target.com[img]http://img805.imageshack.us/img805/4355/regionxw.png[/img]
[img]http://img138.imageshack.us/img138/6647/regionsh.png[/img]
Spoiler (Click to View)
Now when we have our servers IP it's time to find vulnerable websites.
Go to http://bing.com and enter:
Code
IP:IPyougotbypingingthesite ".php?*="[img]http://img99.imageshack.us/img99/3843/regionhe.png[/img]
Now let's search for an website vulnerable to SQLi. (It can be any site, any vulnerability)
After few minutes i have found my vulnerable website.
I have admin info and i shelled it.
(You can find that here https://hackforums.net/showthread.php?tid=2615672 )
So i'm in my shell now and it's time to access our target site.
Chapter II
First thing you need to find is a full path of your website.
It is usually like:
Code
/home/username/public_html/Now go to your shell and execute this command:
Code
cat /etc/passwd[img]http://img228.imageshack.us/img228/47/regioni.png[/img]
[img]http://img715.imageshack.us/img715/1792/regionkn.png[/img]
Now copy all text you got and paste it into your notepad.
That file contains all users that use that server so your target will be there.
My target has "cube" in it's URL so i will search for "cube" in the notepad.
You got the point, right?
[img]http://img341.imageshack.us/img341/2795/regiongd.png[/img]
Now i know my targets full path:
Code
/home/softcube/public_html/Chapter III
When you have full path it should be easy from now.
My website is Joomla and i know where is the file that contains MySQL connection info.
Code
/home/softcube/public_html/configuration.phpJust browse around your site and you will figure out what software it runs.
For wordpress is
Code
/home/softcube/public_html/wp-config.phpSo upload our symlink file and mysql editor file.
Open symlink file and enter your websites path and file you want to view.
In my case it's:
Code
/home/softcube/public_html/configuration.php[img]http://img35.imageshack.us/img35/2513/regioncn.png[/img]
[img]http://img585.imageshack.us/img585/4794/regiontf.png[/img]
Now click on the "symlink" and now we have our targets mysql info.
[img]http://img651.imageshack.us/img651/1213/mozillafirefoxr.png[/img]
Copy all that in a Notepad++
(It's better because you can easily find password and username)
Find username and password and open mysql.php file.
Enter the credentials and now we can edit the database.
[img]http://img824.imageshack.us/img824/8474/regionvw.png[/img]
[img]http://img845.imageshack.us/img845/9578/regionpw.png[/img]
[img]http://img38.imageshack.us/img38/711/regionfv.png[/img]
Now click "Tables" and find admin table.
It can be users, staff and replace admin hash.
(Remember to note down original hash so that way your hack stays undetected if you want access)
[img]http://img853.imageshack.us/img853/8381/regionsc.png[/img]
Now, i've changed the hash and logged into the Joomla panel.
[img]http://img600.imageshack.us/img600/2779/wholescreenh.png[/img]
And now i just have to shell it.
That's all for now.
I know i did bad on explanation but if you want you can PM me or post here and i will awswer all of your questions. ;)
1) Symlink script -> http://pastebin.com/yYJ4Urhr
2) MySQL script -> http://pastebin.com/wBg5qeMX
3) WSO shell -> http://pastebin.com/M8b2t3BD (Change the hash! Default password is 123)
* - CyberSyringe - Sep 2, 2012
Hacking the unhackable 😁
Great HQ tutorial, will add this to my collection.
* - Hayley - Sep 2, 2012
Amazing! All of your tutorials are just awesome. I'll be bookmarking this for later use.
Jesi zvijer. :D
* - Bacardi - Sep 2, 2012
Really good as always. Got it bookmarked.
* - ĦĒČŦØŔ - Sep 2, 2012
Great tutorial mate I would try that now.
Thank you.
* - MagicMushroom™ - Sep 2, 2012
Wow...amazing!
I realy need this!
Bookmarked for testing it later...
* - Light Yagami. - Sep 2, 2012
best tut i ever seen thanks for posting this i well use this for sure
* - soeasy - Sep 2, 2012
Freaking awesome tutorial one more time.
You are great.🙂
* - root.localhost - Sep 2, 2012
Meh this is kinda miss leading in a way because real hacking takes time to plan out however sometimes you might be able to find a backdoor to get in and i dont mean a trojan back door i mean like finding a website that is hosted on the same server and that website might be vulnerable which could then let you hack the site your mainly trying to target....
I made a video that talks about using Symlinks bypassing it is a nice way to hack shared servers without needing to get r00t on them...
* - Dyme - Sep 2, 2012
Another great tutorial. Thanks for contributing!
* - HaxOr❤ - Sep 3, 2012
Thanks for the support guys! :)
* - RUMBLE - Sep 3, 2012
Great tutorial, bookmarked 😁
Thanks
* - wraithcranzz - Sep 3, 2012
Wow amazing Tutorial mate! Im Gonna Try this method now ;)
Thanks 👍
* - Desmolicious - Sep 3, 2012
lol xD I searched on bing and got "No results found for IP:85.xx.xxx.xxx".php?*=". " (lol I fail xD)
* - king225 - Sep 3, 2012
Great tutorial man,,, always tutorial have more knowledge