+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: [TUT] How To Find Admin Pages! Serveral Methods w/ Pictures! [TUT] (/showthread.php?tid=3013389)
Pages: Pages
1
2
[TUT] How To Find Admin Pages! Serveral Methods w/ Pictures! [TUT] - Noah™ - Nov 11, 2012
Hello guys
today im going to be showing you how to find the admin page of a website via several methods!
so lets begin
robots!
This is the easiest method for finding a admincp however will nto always work. basically you need to add a /robots.txt to the end of your site like so
https://secure.imdb.com/robots.txt
you will then get greeted with a screen like this :
Spoiler (Click to View)
![[Image: eb427e2c6610d87b302ed5fee57ef9f9.png]](https://gyazo.com/eb427e2c6610d87b302ed5fee57ef9f9.png)
you then can look through robots in disallow for admincp or admin etc then just enter that as the directory like : http://www.example.com/admincp/
Google Method
This method uses only google dorks to search through your target site this is the 2nd easiest method for finding a CP so first of all get your target site's full http adress like such :
http://www.dawsonera.com/
then go onto google and type :
site:yoursitehere "admin"
site:http://www.dawsonera.com/ "admin"
you will then be greeted by a list of pages containing admin in the header like so :
Spoiler (Click to View)
![[Image: 8959309b8a73e6506507d6ff95a00c02.png]](https://gyazo.com/8959309b8a73e6506507d6ff95a00c02.png)
you can also use the following dorks :
Spoiler (Click to View)
Online Page Finder
this method doesnt require any tools and can be executed from a web browser. the most reputable and well known admin page finder is outlaws which can be found here:
http://tools.th3-0utl4ws.com/admin-finder/
you must then click the support links and just close them down strait away like so :
Spoiler (Click to View)
![[Image: eebcc38eab754b55a84b12f151e9deac.png]](https://gyazo.com/eebcc38eab754b55a84b12f151e9deac.png)
you will then be greeted by this page :
Spoiler (Click to View)
![[Image: f2e4f2beef370045c96a32c6e8d9e5d5.png]](https://gyazo.com/f2e4f2beef370045c96a32c6e8d9e5d5.png)
you then must enter your URL including the backslash and it will begin the requests like so
Spoiler (Click to View)
![[Image: 7b563cb4fad92d821acf4bd2d021445b.png]](https://gyazo.com/7b563cb4fad92d821acf4bd2d021445b.png)
it will then display your admin page below.
Admin Hosting
This uses the admincp simply by logging into the controlpanel that webhosting servers give you like so : http://www.SPAM.com/
Spoiler (Click to View)
![[Image: LDP3q.png]](https://i.imgur.com/LDP3q.png)
sometimes a admins login details will be on a SQL DB and be the same as the details they use to login to a proper CP so to find out the hoster go to :
http://www.who.is and enter your website. you then can go to info and find out the hoster then login with the admins site, email or username.
or simply go to http://www.examplesite.com/cpanel which will be a panel provided by default by most web providers!
Admin Page Finder Tools
this is the 2nd to last method and the one that requires tools.
first of all there are several tools that are available, however it is just down to personal preference. The 2 i am going to be showing you today are called
DW Admin page finder 1.1 which can be downloaded from here :
http://darkwings-dwtools.blogspot.co.uk/2011/02/dw-admin-finder-v10.html
its one of the fastest out there and it has a big admin page finder.
all you have to do is enter your target website with or without the "/" and it will begin to scan.
the second one is with a classic skid tool : Havij
so start up havij and navigate through the tabs until you get find admin :
![[Image: 6f12fb77ef6c043969f1617240b73e52.png?1352637643]](https://gyazo.com/6f12fb77ef6c043969f1617240b73e52.png?1352637643)
then enter your website, select the page extensions (php html asp etc)
and click scan it will display the websites below. like so:
Spoiler (Click to View)
![[Image: 1963a99bcf07cd217210297fb4ad4632.png]](https://gyazo.com/1963a99bcf07cd217210297fb4ad4632.png)
![[Image: abccadda6f397271215f0ea2da48d8ae.png?1352637837]](https://gyazo.com/abccadda6f397271215f0ea2da48d8ae.png?1352637837)
The Crawling Method
the last method is the most time intensive and will require specialised software such as darkspider or aucentix
for this tutorial i will be using aucentix just enter your URL and it will produce a list of all of the pages listed in the website as such :
Spoiler (Click to View)
![[Image: f455dd36b6861cb7ee1ecf6a436fca61.png?1352637986]](https://gyazo.com/f455dd36b6861cb7ee1ecf6a436fca61.png?1352637986)
you then simply locate the directory such as admincp admin login etc
--
Hope this helps many people who request to find an admin page as i see alot of threads in here about this.
-black
* - MinecraftGeek - Nov 11, 2012
Very High Quality tutorial my friend, Thanks a lot for posting this.
* - Noah™ - Nov 11, 2012
thanks bro first tut so i hope its ok :p wanted to give back to the community!
* - MinecraftGeek - Nov 11, 2012
I thought you deserved some more green 😉
I hope others find this useful.
* - Zixem - Nov 11, 2012
๖ۣۜBlack_Star Wrote:the second one is with a classic skid tool : HavijThis tool isn't for skids unless you know what the tool is doing...meh, I still think that injecting manual is the best way.
Also, you can add a trick that the to the thread that you can enter with the admin details in the hosting site's login page....sometimes it works :3
Nice thread.
* - Illicit - Nov 11, 2012
Very nice tutorial! :)Should be good for new comers ...
* - Noah™ - Nov 11, 2012
(Nov 11, 2012 06:10 AM)Zixem Wrote: This tool isn't for skids unless you know what the tool is doing...meh, I still think that injecting manual is the best way.
Also, you can add a trick that the to the thread that you can enter with the admin details in the hosting site's login page....sometimes it works :3
Nice thread.
thanks for the advice thread updated now!
-black
* - Gaspsystem - Nov 11, 2012
Thank you for an really good tutorial :) !
* - Bonfire - Nov 11, 2012
Very nice tutorial!
However, the site I'm trying to access is not in http format. It's just the domain, without HTTP
Example: google.com/
Thanks in advance, for any help
* - yeikel - Nov 11, 2012
In my oppinion the best one its The Crawling Method but sometimes others are fasters
* - MireX - Nov 11, 2012
Nice tutorial...
All Methods in one place.
Maybe you can add some color or format your text so that it is easier to read.
* - Th3PonyWizard - Nov 11, 2012
Admin Page Finder Tools = Online page finder.
Crawling = Page finder tool.
Your grammar is also pretty messed up. I'd recommend a re-write.
* - Noah™ - Dec 16, 2012
to help others out. please use the search bar. don't create new threads cus your lazy xD
* - Patalach - Dec 16, 2012
Thank you for tutorial. Did not know 2 last methode :)
* - Ram0n.exe - Dec 16, 2012
Very nice tutorial man!!
-Ram0n.exe