+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: This website doesn't have SSL, any help hacking it? (/showthread.php?tid=5261756)
This website doesn't have SSL, any help hacking it? - XxLilithxX - May 7, 2016
Hello All,
I want to learn a little bit about hacking and I have recently found a website that doesn't seem to have an SSL certificate?
I have looked into Sql injections but I am not sure if it will work with this website as I have tried messing around with adding commas ' in the links or sign in text boxes but nothings happening.
What I have found out is this:
- The site uses php
- It doesn't have an SSL certificate (it uses http)
- It uses a HTTP Post method for the login
- It MOST likely (not 100%) uses a MySQL Database?
Can anyone please point me in the right direction to trying to hack this site?
Note *Although I want to hack this site it is purely for learning curve and challenge, I have no malicious intentions.
Here is the link:
kamar.lbc.school.nz/student/
* - killad922 - May 7, 2016
Brah, you trying to hack the student portal of MY fucking school. Like how the fuck is it that I see this post, click on it, and find out that it's my school your talking about. Like the odds wtf.
* - Cxdde3990xc - May 7, 2016
I laughed so hard at this thread
* - ๖ۣۜCriminal - May 7, 2016
Watch out guys Lilith the female hacker is gonna compromise our root SSL certs and do area wide MITM attacks cause she works for NSA in all seriousness SSL doesn't mean anything when it comes to web app exploiting you can still use an intercepting proxy and modify the data you want before it gets sent to the server, it only hampers web apps that have the HSTS header enabled since you can use sslstrip if your into doing local based MITM attacks.
* - ๖ۣۜCitizen Z / Napalm - May 7, 2016
lmao, sorry but the info you gave is useless, we won't help you hack a school (IN MY COUNTRY, Bloody Hell).
Read more into dns spoofing or sqli
* - xFR3 - May 7, 2016
All of the stuff you said is how most websites are built dude. You'll probably need to map the site/web application and see if what you can find. Is the site running a CMS?