+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: I have FTP access, how do I get cPanel access? (/showthread.php?tid=5221410)
I have FTP access, how do I get cPanel access? - Matthew 6:33 - Mar 30, 2016
I have FTP access, how do I get cPanel access from this?
Is it possible. Any help would be great.
Thanks.
* - Ninetales. - Mar 30, 2016
I'm fairly sure you can backdoor the cPanel. I personally don't know how to do it, but I'm sure someone with the capacity can help you soon. (it could be as simple as not requiring the login cookie on the pages of the panel).
* - crimsoncypher - Mar 30, 2016
make html,php, javascript page that looks like cpanel login
Use htaccess to redirect the domain to the landing page you made
Use sendmail or something similar to have it send the details to you when they try to login. if you know the ip on the pc that logs into the cpanel or controls it, then you can fix the htaccess so it only redirects that pc/ip instead of all traffic.
this won't work well if you don't twist what I said. You have to take multiple things into account here.
* - Matthew 6:33 - Mar 31, 2016
Sounds like it should work. I'll give anything a try!
Anyone have any other ideas?
* - ๖ۣۜCriminal - Apr 1, 2016
With FTP you don't need cpanel access just spawn a shell go to the cpanel directory and look for config files or something you can do most likely whatever you need with shell access.
* - Mekkay - Apr 8, 2016
thank you guys I wish you continued success :)
RE: * - Toasties - Feb 16, 2018
(Mar 30, 2016 10:45 PM)crimsoncypher Wrote: make html,php, javascript page that looks like cpanel login
Use htaccess to redirect the domain to the landing page you made
Use sendmail or something similar to have it send the details to you when they try to login. if you know the ip on the pc that logs into the cpanel or controls it, then you can fix the htaccess so it only redirects that pc/ip instead of all traffic.
this won't work well if you don't twist what I said. You have to take multiple things into account here.
A phising attack! You know I've never thought about this. Great idea!