+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Beginner Hacking (https://hackforums.net/forumdisplay.php?fid=4)
+----- Forum: Hacking Tutorials (https://hackforums.net/forumdisplay.php?fid=47)
+----- Thread: [TOTURIAL] Webhosting site exploit.! (/showthread.php?tid=4814984)
[TOTURIAL] Webhosting site exploit.! - l0l_l0l - May 10, 2015
HELLO, I found an exploit for a website to get their paid hosting service for 0$! it isn't that great but its cool. 👍
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
Tools Needed:
Internet
Firefox Web Browser
Tamper Data (it's an addon for firefox)
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
Steps:
Step #1 Open up Firefox, you need to install the Tamper Data addon, search Tamper Data on google and install it then restart firefox it says to do so.
Step #2 Go to the website were going to this exploit on which is cpanel.hostinger.co.uk. Hey I tried this on a few other webhosts and it didn't work so not all webhosts will work using this exploit.
Step #3 Once logged in the cpanel hover over on Hosting in the red TAB Click + New Account.
Step #4 Now choose on the paid choices Premium, Business.
Step #5 Okay were kinda almost done Its now time to open the tool Tamper Data in firefox on the top left hand corner It says tools and find and click Tamper Data HEHEHE 🤗 IT should open up a program on firefox don't touch it yet.
Step #6 Now were here... click on any billing cycle choose any :)
now its time to click start tamper on the program then click continue on the website it pops up click Tamper.
Step #7 Find period erase everything in the field then click okay. Keep clicking submit until you get to the next page then click stop Tamper in the program we don't need it anymore.
Step #8 FINAL STEP It will say invoice not found then reload the page click the red TAB on top again it will have your paid webhosting that we got for free. 🤗
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
So that's how you do it! I hope this helps.👍
* - IDK - May 10, 2015
This method is known as " Web Parameter Tampering "
In which attacked temper the request and manipulation the parameters exchanged between client and server in order to modify application data, such as price and quantity
* - Lyralei - May 11, 2015
Any chances on the hosting getting terminated ? Probably high :/
Thanks for the tut though op :)
* - l0l_l0l - May 11, 2015
(May 11, 2015 05:58 AM)Lyra Wrote: Any chances on the hosting getting terminated ? Probably high :/
Thanks for the tut though op :)
Yer welcome :) I don't know if the hosting is getting terminated.
* - $uicide - May 11, 2015
(May 11, 2015 07:28 AM)l0l_l0l Wrote: Yer welcome :) I don't know if the hosting is getting terminated.
just so you know, i hooked you up. setup a thread in free section and credited you. didnt think your thread/method was getting enough attention.
https://hackforums.net/showthread.php?tid=4816105
* - l0l_l0l - May 11, 2015
(May 11, 2015 02:52 PM)UNKNOWING Wrote: just so you know, i hooked you up. setup a thread in free section and credited you. didnt think your thread/method was getting enough attention.
Yeah wow thank you for doing that, I really appreciate it.
* - Lyralei - May 12, 2015
Lol not sure if hostinger is mad or probably just don't care.
![[Image: 776f08e4b2.png]](https://puu.sh/hKqZ2/776f08e4b2.png)
Gonna try putting something here and just run auto backup.
* - ale12386 - May 12, 2015
Thanks for the tut op! Will try this later on. 🤝
* - Good Morning - May 12, 2015
This really is useful. Thanks a lot OP!!
* - l0l_l0l - May 12, 2015
(May 12, 2015 03:14 AM)Lyra Wrote: Lol not sure if hostinger is mad or probably just don't care.
Gonna try putting something here and just run auto backup.
IM SORRY HOSTINGER. Please don't kill me.
* - BrokenMachine99 - May 12, 2015
Yeah nice one. thanks for sharing. keep it up
* - Luc4s - May 12, 2015
Isn`t working anymore :(
"Invoice not found."
* - $uicide - May 12, 2015
(May 12, 2015 11:19 AM)Luc4s Wrote: Isn`t working anymore :(
"Invoice not found."
if you read what the tutorial says, thats what is supposed to happen. refresh a few times and go to home page.
* - l0l_l0l - May 14, 2015
Iv also tried it on the ssl certificates and it works. To make it work instead of erase everything on the "period" box type in monthly and it will do it for free :) It says I have to wait 1 business day though I just tried it today im going till tomorrow.
It says this.
Data for Comodo PositiveSSL Certificate (sak0ya.zz.mu) has been saved. Please wait 1 business day for SSL certificate activation.
* - KaliKid - May 14, 2015
dude i fucking love u man if i was l33tor ub3r i'd plus rep u