+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: Need help on how to deface websites [EDUCATIONAL PURPOSES ONLY!] (/showthread.php?tid=4538824)
Need help on how to deface websites [EDUCATIONAL PURPOSES ONLY!] - Dea7h - Nov 15, 2014
I need someone who is skilled in defacing websites to teach me how to deface either through SQLI or anything else really all help is appreciated
Skype - Danarthy🤝
* - Natalie Portman - Nov 15, 2014
Seriously lol that educational purposes thing isn't necessary. Everyone knows why you're here, it's cool.
So let's start from the top yeah?
You find your vulnerable site, let's say it's site.com
You find the vuln, eg site.com/index.php?id=1, find the type of SQLi it is and then get to work
You wreck that bitch and make it fall apart, get that admin panel open and then upload a shell, once your shell is hot you can easily deface the site, or just sit there and wait for your shell to be backed up so it's always there, root the box or just chill.
Also it's a pretty bad idea to post your skype here bro, that shit'll get ddosed real quick
EDIT: I just considered the possibility that you have no idea how to do SQLi, just use the search function up the top "SQLi tutorial" and you'll be set.
I wrote one a little while back, here
* - Dea7h - Jan 10, 2015
-CLOSE THREAD PLEASE-
No longer needed!
* - Simply™ - Jan 10, 2015
(Nov 15, 2014 08:50 PM)Natalie Portman Wrote: Seriously lol that educational purposes thing isn't necessary. Everyone knows why you're here, it's cool.
So let's start from the top yeah?
You find your vulnerable site, let's say it's site.com
You find the vuln, eg site.com/index.php?id=1, find the type of SQLi it is and then get to work
You wreck that bitch and make it fall apart, get that admin panel open and then upload a shell, once your shell is hot you can easily deface the site, or just sit there and wait for your shell to be backed up so it's always there, root the box or just chill.
Also it's a pretty bad idea to post your skype here bro, that shit'll get ddosed real quick
EDIT: I just considered the possibility that you have no idea how to do SQLi, just use the search function up the top "SQLi tutorial" and you'll be set.
I wrote one a little while back, here
(Jan 10, 2015 09:18 AM)Dea7h Wrote: -CLOSE THREAD PLEASE-
No longer needed!
Yeah that tutorial was pretty top notch. Good luck Death.
* - TheWholeWorldExplodes - Jan 10, 2015
(Nov 15, 2014 08:50 PM)Natalie Portman Wrote: Seriously lol that educational purposes thing isn't necessary. Everyone knows why you're here, it's cool.
So let's start from the top yeah?
You find your vulnerable site, let's say it's site.com
You find the vuln, eg site.com/index.php?id=1, find the type of SQLi it is and then get to work
You wreck that bitch and make it fall apart, get that admin panel open and then upload a shell, once your shell is hot you can easily deface the site, or just sit there and wait for your shell to be backed up so it's always there, root the box or just chill.
Also it's a pretty bad idea to post your skype here bro, that shit'll get ddosed real quick
EDIT: I just considered the possibility that you have no idea how to do SQLi, just use the search function up the top "SQLi tutorial" and you'll be set.
I wrote one a little while back, here
Once again you make yourself sound like an utter skid, only this time when I call you out on it you can't neg rep me and not respond. You're actually one of the funniest members on here. And by funny I mean pitiful. Try actually looking into other vulnerabilities beside Sql, there is more to website hacking, and also assuming all servers will backup files is stupid. Instead you'd be better placed putting a backdoor onto the server
* - ultimate hacker 23 - Jan 10, 2015
(Nov 15, 2014 08:50 PM)Natalie Portman Wrote: Snipppp
I hate sqli injections, i use havij, it works nice for finding sites with dorks. Just enter the site name and search for vulnerabilities, although it's always easier to learn by doing the full process. most of these sites have already been defaced, hacked, or so. It's hard to find a site that hasn't been hacked with sqli, that's still vulnerable.
* - Xorex - Jan 10, 2015
Hmm via SQLi, is basically you would find the SQLi exploit, and you can either manually or used an automated tool to get the Databases, (SQLMAP is recommended).
Once you get the Databases and hopefully get the admin details, (you might have to crack a hash), you get into the Admin Panel if there is one on the website. Usually it might /admin.php, etc. You can also use an admin scanner to find the page.
Then if it allows you to upload you can upload a shell. You can download number of shells from http://r57.gen.tr and remember to open it with Notepad and edit the details like the password, etc.
So try to see if you are allowed to upload via the Admin Panel, and if it's JPEG you can spoof the shell to be shell.php.jpg and you can upload it that way or via Tamper Data. Once the shell is uploaded, just go on http://www.site.com/shellname.php an you will have access to the shell.
You will see all the files on the server, and to simply deface, upload your own index file, and you are done.
This is just a general way of doing it, there are a lot more ways, I suggest you go read the many tutorials in this section!
* - TheWholeWorldExplodes - Jan 11, 2015
This is way too simplified and using a shell from r57 is most likely going to be backdoored.
* - Xorex - Jan 11, 2015
(Jan 11, 2015 06:33 AM)TheWholeWorldExplodes Wrote: This is way too simplified and using a shell from r57 is most likely going to be backdoored.
Correct it is simplified as there are numerous of tutorials literally in this section.