Hack Forums
Bypass The Admin Login Page Exploit ! - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: Bypass The Admin Login Page Exploit ! (/showthread.php?tid=3581474)

Pages: Pages 1 2 3


Bypass The Admin Login Page Exploit ! - Vaxorr - Jun 27, 2013


Dorks : inurl:/index_ebay.php | "Powered by: Resell Rights Fortune" | Powered By: Free Monthly Websites 2.0
Steps :
1) find a vlunerbale site
2) open sitepath.com/admin
3) change the source code of the password field as follow :
[img]http://nullserver.my3gb.com/Capture.PNG[/img]
4) select the word "admin_setting_write" at the top of the login box
5) press Enter
6) We are at the cPanel
7)
🤫
8) 🎉
9) 👍


* - Incorrect - Jun 27, 2013

Thanks for this Tutorial, gonna try it out later


* - Lelouch Vi Britannia - Jun 27, 2013

Cool method, But I get this error when I try.
[Image: HKWf4uL.png]


* - huji - Jun 27, 2013

http://www.exploit-db.com/exploits/24953/
use this exploit


* - whyitell - Jun 27, 2013

[Image: 3pNyR.png]

I did it exactly as you did, but it didn't work.


* - Paradoxmoney - Jun 27, 2013

oh really thanks for the share mate , hope it works for me


* - Scrapper - Jun 27, 2013

Thank you worked for me Mate! Tried it and It Amazingly Worked.


* - rabbitownzyu - Jun 27, 2013

It worked, nice little thing you got here. I suggest hiding the url a bit more if you want to keep it more secretive, I found it.


* - Gilesfun - Jun 27, 2013

Found a site but someone had already been at it!


* - Vaxorr - Jun 28, 2013

(Jun 27, 2013 01:45 PM)Lelouch Vi Britannia Wrote:  Cool method, But I get this error when I try.
[Image: HKWf4uL.png]

😅 try finding another website


* - Scrapper - Jun 28, 2013

Try hiding the Website Url Also and I wonder why You hided it?


* - XxBushyHax0rxX - Jun 28, 2013

Works exactly as stated on the tin! Nice find.


* - Vaxorr - Jun 28, 2013

(Jun 28, 2013 10:48 AM)Scrapper Wrote:  Try hiding the Website Url Also and I wonder why You hided it?
here is the site path : http://copywriting.csseng.net/admin/


* - huji - Jun 28, 2013

http://copywriting.csseng.net/admin/
user:password admin:huji


* - yukta.888 - Jun 28, 2013

(Jun 27, 2013 01:20 PM)nullserver Wrote:  4) select the word "admin_setting_write" at the top of the login box

I did exactly what u said, but its not working for me, after changing from source code what can i do, Dont getting a point of select a word "admin_setting_write"