+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: Have many logins but don't know where to login? (/showthread.php?tid=4758871)
Have many logins but don't know where to login? - iRoyals - Apr 2, 2015
All the admin page finders turn up nothing, 99% of the websites i have user:pass with admin privs to i can't find the pages. Any tips?
* - Viktory - Apr 2, 2015
You can use a better admin finder, check /robots.txt for a login, or as a last resort check for file_priv if you have a SQLi vulnerability and skip having to mess with admin logins altogether
* - iRoyals - Apr 3, 2015
(Apr 2, 2015 06:23 AM)Viktory Wrote: You can use a better admin finder, check /robots.txt for a login, or as a last resort check for file_priv if you have a SQLi vulnerability and skip having to mess with admin logins altogether
I'm still extremely new to this and gettings the databases is about as far as i can go. If you could help me out with skipping login in I would be greatful
* - ComplexReZ - Apr 3, 2015
PM me the site not the vulnerability part just the
http < siite > .com
And ill message on here the result
* - iRoyals - Apr 3, 2015
(Apr 3, 2015 01:02 AM)ComplexReZ Wrote: PM me the site not the vulnerability part just the
http < siite > .com
And ill message on here the result
No i don't want that lmao, what's the point in doing that. I want to do it myself. Thanks for the offer though
* - Viktory - Apr 3, 2015
(Apr 3, 2015 12:50 AM)iRoyals Wrote: I'm still extremely new to this and gettings the databases is about as far as i can go. If you could help me out with skipping login in I would be greatful
Select concat(user,file_priv) from mysql.user
Read up a guide on how to upload a shell using SQLi.
* - iRoyals - Apr 3, 2015
(Apr 3, 2015 03:43 AM)Viktory Wrote: Select concat(user,file_priv) from mysql.user
Read up a guide on how to upload a shell using SQLi.
This was actually a useful reply. Thanks alot man I played around and I understand how to use it just gotta find the right situation to make use of it.
Didnt have much luck with the shell though, all tutorials seem to take into consideration you have access to the admin panel.