+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: Ideas on how to hack this website? Need ideas. (/showthread.php?tid=2885507)
Ideas on how to hack this website? Need ideas. - AnonTech - Sep 22, 2012
Hey HF, let me start off introducing my self as AnonTech, i'm not really known at all, but i figured i would say hi before i went all "HELP ME NOW!!!"
Anyways, the website i am trying to gain control of is http://homelessclownfilms.com/
I have tried looking for SQLi Vulns, but to no avail. I also tried XSS the contact me form, which also resulted in nothing than probably a suspicious email to the owner, lol.
I'm not asking you to hack this for me, or even asking to look for vulns (although either would be nice)
But i would like to know what are alternatives to trying to gain access? I know the website is hosted on Host Gator and has a cpanel.
And know all the owners personal information from a simple whois lookup, i just can't seem to find anything.
Any help is appreciated! Thanks HF members!
* - thethatguy - Sep 22, 2012
130 sites hosted on IP Address 50.116.98.66
ID Domain Site Link
1 branghamcpa.com branghamcpa.com
2 engineersnw.com engineersnw.com
3 asianfinancialsociety.org asianfinancialsociety.org
4 viewparkprep.org viewparkprep.org
5 gitarx.com gitarx.com
6 dougbutler.com dougbutler.com
7 butlerprofessionalfarrierschool.com butlerprofessionalfarrierschool.com
8 phongocthanh.com phongocthanh.com
9 thecaringeffect.org thecaringeffect.org
10 black-atheists.com black-atheists.com
11 inawater.com inawater.com
12 buckscountyrenewables.org buckscountyrenewables.org
13 marrakechhotelbulletinboard.com marrakechhotelbulletinboard.com
14 naturalezafoundation.org naturalezafoundation.org
15 oc2600.org oc2600.org
16 babies-n-beyond.com babies-n-beyond.com
17 postapocalypticsurvival.com postapocalypticsurvival.com
18 teleactivities.com teleactivities.com
19 columbia-mo-realty.net columbia-mo-realty.net
20 sfbasque.org sfbasque.org
21 cheethamandcrumpsall.info cheethamandcrumpsall.info
22 ab-pocalypse.com ab-pocalypse.com
23 hiddenimage.ca hiddenimage.ca
24 1ddp.org 1ddp.org
25 brooklynsaints.info brooklynsaints.info
26 getoffmylawndesigns.com getoffmylawndesigns.com
27 dating.dictionaries.ro dating.dictionaries.ro
28 outreach-church.com outreach-church.com
29 nccofl.org nccofl.org
30 art-exiled.org art-exiled.org
31 ppacc.info ppacc.info
32 vilaentitats.info vilaentitats.info
33 christmas.dictionaries.ro christmas.dictionaries.ro
34 aintdoneit.com aintdoneit.com
35 scriptsnews.com scriptsnews.com
36 simplefatlosssolutions.com simplefatlosssolutions.com
37 laurenwaterscasting.com laurenwaterscasting.com
38 theirreverenttraveller.com theirreverenttraveller.com
39 jobscatawba.com jobscatawba.com
40 1hormonebalance.org 1hormonebalance.org
41 piratetinman.com piratetinman.com
42 emwpeace.org emwpeace.org
43 atruefabrication.com atruefabrication.com
44 stoptryingtoconfusemewiththetruth.com stoptryingtoconfusemewiththetruth.com
45 solutions1000.com solutions1000.com
46 excellenceingiving.org excellenceingiving.org
47 pytpr.com pytpr.com
48 jashtonphotoblog.com jashtonphotoblog.com
49 hkbusinessboom.com hkbusinessboom.com
50 apocalypseforum.com apocalypseforum.com
51 2iter.com 2iter.com
52 wwwimobiliare.ro wwwimobiliare.ro
53 jcliftonphotography.com jcliftonphotography.com
54 lucaseo.com lucaseo.com
55 kitchengraphics.net kitchengraphics.net
56 gentdesantacoloma.org gentdesantacoloma.org
57 lulaf.com lulaf.com
58 jeneewrites.com jeneewrites.com
59 egglocator.net egglocator.net
60 roulette-playonline.com roulette-playonline.com
61 besttreadmillunder.com besttreadmillunder.com
62 beaarp.com beaarp.com
63 tintucbatdongsan.info tintucbatdongsan.info
64 atv4u.net atv4u.net
65 diypcacademy.com diypcacademy.com
66 puertovallartavacations.info puertovallartavacations.info
67 meistertorten.com meistertorten.com
68 campus16.org campus16.org
69 etisalatproxy.info etisalatproxy.info
70 adamwlevy.com adamwlevy.com
71 howtodealwithpanicattack.com howtodealwithpanicattack.com
72 kittynotarysantarosa.com kittynotarysantarosa.com
73 spgraphik.com spgraphik.com
74 p2pwords.net p2pwords.net
75 emimacleod.com emimacleod.com
76 acmeworld.info acmeworld.info
77 rylaf.com rylaf.com
78 bvchep.info bvchep.info
79 newhampshirepaintballleague.net newhampshirepaintballleague.net
80 mach-ii.info mach-ii.info
81 greenwaysforeurope.org greenwaysforeurope.org
82 uwaikido.org uwaikido.org
83 emprendedoraudaz.com emprendedoraudaz.com
84 backtobasicshomestead.com backtobasicshomestead.com
85 theplanningpodcast.com theplanningpodcast.com
86 spellboundsuccess.com spellboundsuccess.com
87 main-rhoen-marktplatz.info main-rhoen-marktplatz.info
88 stevenkraft.ca stevenkraft.ca
89 caepusa.org caepusa.org
90 myphonecover.com.au myphonecover.com.au
91 ryanlaframboise.com ryanlaframboise.com
92 beonpage1ofgoogle.info beonpage1ofgoogle.info
93 ugrmixingmusic.com ugrmixingmusic.com
94 webhostingpump.com webhostingpump.com
95 seesharks.org seesharks.org
96 charlesrockisland61201.com charlesrockisland61201.com
97 concorsocanorosolarolofestival.info concorsocanorosolarolofestival.info
98 plans-interactifs.info plans-interactifs.info
99 onthetreadmill.com onthetreadmill.com
100 found-objects.net found-objects.net
101 nutsaboutnuts.org nutsaboutnuts.org
102 ganarmasdinerohoy.info ganarmasdinerohoy.info
103 hotnovosti.info hotnovosti.info
104 elcomensalurbano.com elcomensalurbano.com
105 imlookingforanitjobinlondon.co.uk imlookingforanitjobinlondon.co.uk
106 caboverd.info caboverd.info
107 zhsport.co.il zhsport.co.il
108 mynaughtyparrot.com mynaughtyparrot.com
109 canadarts.info canadarts.info
110 1c3n1x.com 1c3n1x.com
111 mefoodsecurity.org mefoodsecurity.org
112 yahooimapconnector.info yahooimapconnector.info
113 profetii.mariuscilibia.ro profetii.mariuscilibia.ro
114 lacotedazur.fr lacotedazur.fr
115 nextjobfromhome.info nextjobfromhome.info
116 findanotary.info findanotary.info
117 trybuyshop.com trybuyshop.com
118 calculatoareinternet.ro calculatoareinternet.ro
119 bjodeh.com bjodeh.com
120 uicandy.net uicandy.net
121 justchurch.info justchurch.info
122 butlerhorseshoeingschools.com butlerhorseshoeingschools.com
123 cocalog.com cocalog.com
124 toledocertifiedpublicaccountant.com toledocertifiedpublicaccountant.com
125 vaginosisbacterianainfeccionvaginal.com vaginosisbacterianainfeccionvaginal.com
126 primariadrobeta.ro primariadrobeta.ro
127 mariuscilibia.ro mariuscilibia.ro
128 theolympicgames.net theolympicgames.net
129 economisti.ro economisti.ro
130 politicamonetarafiscala.economisti.ro politicamonetarafiscala.economisti.ro
There are several vulnerable domains on the hosting. Have a look and exploit them upload your php shell and establish a symbolic link to the domain you want. Keep your shell in a well hidden directory in order to keep it up for future reference.
* - AnonTech - Sep 22, 2012
Any threads on here i can read/any other sources i can learn how to do that, thanks for the reply by the way! And how did you look up the other websites hosted by the same server?
* - Tate - Sep 22, 2012
Me and a few friends hacked bobbamarket when it was on hostgator by SEing the support into reseting the cpanel pass. Also try hacking the email and sending a password reset. Unconventional but effective.
* - AnonTech - Sep 23, 2012
Also, for using a php shell, doesn't shell access have to be enabled on the hosting site by request? i know my hosting site does require it, just wondering if there is a bypass.
* - observers.watch - Sep 24, 2012
http://homelessclownfilms.com/asldkjf.asp
It's run by HostGator. I've heard HostGator is easy to SE. Look up some guides (they're big enough that I'm sure there's a few on SE'ing them) and give them a call and try to get a control panel password reset.
http://who.is/whois/homelessclownfilms.com
Also, the owners info is on the whois for the domain. Now you know some info about him to say when you call up HostGator.