Where do I start learning defacing websites?

Where do I start learning defacing websites? - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: Where do I start learning defacing websites? (/showthread.php?tid=5155429)

Pages: Pages 1 2

Where do I start learning defacing websites? - Peori0y - Feb 1, 2016

Alright, defacing websites.

I think it will be pretty hard, but I'd really like to know where to start.
If there's any good tutorials out there, please reply them.

I'm up to learn more stuff..

Thanks.

* - Thin - Feb 1, 2016

(Feb 1, 2016 02:04 PM)Peori0y Wrote: Alright, defacing websites.

I think it will be pretty hard, but I'd really like to know where to start.
If there's any good tutorials out there, please reply them.

I'm up to learn more stuff..

Thanks.

I would start with learning how websites work, how they're made, and how they're secured. Once you know this, you can learn injections and different things to find possible security flaws which you could then abuse based on previous knowledge.

* - DarkAdv - Feb 1, 2016

(Feb 1, 2016 02:04 PM)Peori0y Wrote: Alright, defacing websites.

I think it will be pretty hard, but I'd really like to know where to start.
If there's any good tutorials out there, please reply them.

I'm up to learn more stuff..

Thanks.

* - Wireless Network - Feb 1, 2016

Defacing sites means that you replace index page with your own.
You need to learn how to hack sites not how to deface.

* - Peori0y - Feb 2, 2016

(Feb 1, 2016 04:39 PM)Wireless Network Wrote: Defacing sites means that you replace index page with your own.
You need to learn how to hack sites not how to deface.

Alright, and what would be the best place to start learning that?

* - emadaldin1 - Feb 2, 2016

Pm me
I will send you these pdf books
start with
Hacking+For+Beginners.pdf
then
Grey_Hat_Hacking.pdf
CEHv7.pdf
I'm sure you will learn a lot
best of luck

* - LogoiLab - Feb 2, 2016

If you want to take the easy route look up google dorks. You can find some in the http://exploit-db.com. Just remember to look under the footholds section.

* - Regulus - Feb 2, 2016

I really want to learn this as well. Always wanted to learn how to "Inject" a website to be honest.
Would be awesome if someone could help me out with this. :)

* - Regulus - Feb 2, 2016

(Feb 2, 2016 07:39 AM)LogoiLab Wrote: Regulus? Are you OK? Have you been compromised? Or are you being serious?

Lmao i'm totally serious actually...

* - Vellichor - Feb 2, 2016

(Feb 2, 2016 07:38 AM)Regulus Wrote: I really want to learn this as well. Always wanted to learn how to "Inject" a website to be honest.
Would be awesome if someone could help me out with this. :)

Learn the basic languages forming a website. HTML, CSS, JS, PHP, SQL. Learn the HTTP Protocol. Gain basic familiarity with server software such as Apache, IIS, nginx. Start grasping concepts such as SQLi, XSS. Move up the ladder of attacks displayed on OWASP and make your own malformed software which you'll try to exploit. Get your skills up and do challenges posted everywhere.

* - Jason Stattham - Feb 2, 2016

You need to lean how you can exploit websites. First of all, go learn about PHP and all that shit.

* - ๖ۣۜCriminal - Feb 2, 2016

Why would you want to deface a site? for one its a waste of time and it alerts the sysadmins to take the server offline for a bit to format everything so any backdoors left behind will be wiped, for two if you're gonna deface a site just hijack someones domain via seing the registrar takes barely any skill and you could have all the attention you want. I recommend getting into fuzzing, static analysis and manual review when doing whitebox testing which is how many vulns are found cause alot of common CMS can be installed on localhost and you can grep through the source to find interesting functions that could possibly be abused in your favor.

* - ๖ۣۜCriminal - Feb 2, 2016

(Feb 2, 2016 02:54 PM)LogoiLab Wrote: snip

you can do it over VOIP w/ a vpn or a fresh email plenty of ways to do it anonymously and its very easy see friends do it all the time.

* - Vellichor - Feb 3, 2016

(Feb 2, 2016 02:54 PM)LogoiLab Wrote: good point m8, once you get into a server, clone it, then nuke it and any backups, then put up your deface page.(The clone is useful for stealing infos and accounts🤭...or for monetary gain...🤫)

Oh, and never attempt to social engineer a registrar. Doing so anonymously is almost impossible.

P.S. for sysadmins: Moral of the story, keep offsite backups.

That sounds absolutely retarded. I hope nobody listens to you.

* - SoLong - Feb 4, 2016

(Feb 4, 2016 03:02 PM)LogoiLab Wrote: No point in breaching a server if you're just gonna wait for some other dork to delete your shell, might as well earn something.

Never, but never go full retard