+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: Found admin page [Help] (/showthread.php?tid=4990332)
Found admin page [Help] - Project Fallout - Sep 16, 2015
I found the admin page for the website I wish to attack...
Its Cpanel. How would I go about finding the username and password for the Cpanel
* - Vibe - Sep 16, 2015
The owner of the site/ hosting package would be the one with that, target him.
* - bass booster - Sep 17, 2015
Send him an email saying you found a login and you want the user:pass for the cpanel 🤝
JK, use SE or rat the owner or do anything to try to get it.
If he's like me, he'll have it saved somewhere outside of the email.
Like I have it written down on a notepad that sites on my desk so RATting me wouldn't help for getting my site info
* - Project Fallout - Sep 17, 2015
(Sep 17, 2015 07:22 AM)bass booster Wrote: Send him an email saying you found a login and you want the user:pass for the cpanel 🤝
JK, use SE or rat the owner or do anything to try to get it.
If he's like me, he'll have it saved somewhere outside of the email.
Like I have it written down on a notepad that sites on my desk so RATting me wouldn't help for getting my site info
Is there no way of doing it without SE or Ratting. Because yes its a possibility but is there no way of doing it using say Kali Linux or.. something. I want to be able to upload a shell but there is no where to upload files
* - SIM-2198759 - Sep 17, 2015
(Sep 17, 2015 07:22 AM)bass booster Wrote: Send him an email saying you found a login and you want the user:pass for the cpanel 🤝
JK, use SE or rat the owner or do anything to try to get it.
If he's like me, he'll have it saved somewhere outside of the email.
Like I have it written down on a notepad that sites on my desk so RATting me wouldn't help for getting my site info
Passwords.txt by any chance :D
Spoiler (Click to View)
Other than trying to Bruteforce the login or SE/RAT The owner to get the login, there aren't many other ways to get the access you want (Unless you find a vuln on the website that lets you upload a file (Or make the server download one)
* - N0c7urn - Sep 18, 2015
(Sep 17, 2015 09:58 AM)Project Fallout Wrote: Is there no way of doing it without SE or Ratting. Because yes its a possibility but is there no way of doing it using say Kali Linux or.. something. I want to be able to upload a shell but there is no where to upload files
Kali is just a collection of tools, you could try and brute force like others have suggested but your best bet would be to try and find vulnerabilities
* - Awdr - Sep 18, 2015
Bruteforcing in my opinion is a stupid unless you have a massive amount of accounts to crack, I would advice scanning the website for vulnerabilities/scanning his /server (the one that is hosting the website) and if you get lucky exploit into website/server --> steal files. Or you could SE/Phish him.