+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: Bypassing c-Panel login.. (/showthread.php?tid=5432400)
Pages: Pages
1
2
Bypassing c-Panel login.. - ʆɛѳɗɑʀkZ - Oct 13, 2016
Hi, could someone teach me how to bypass c-Panel login. Most of the sites are hosted from c-Panel, so it would be cool to know how to bypass the login page and get access to the admin privileges. Thanks in advance (:
* - Wires - Oct 13, 2016
Yeah... Probably not going to happen.
* - Сheshire - Oct 13, 2016
Keep this on the down low because this isn't very well known but on all Cpanel logins there is a little x on the top right corner of the CPanel Login Box. If you click that it just ignores the login and gives you access.
* - ʆɛѳɗɑʀkZ - Oct 13, 2016
(Oct 13, 2016 10:37 AM)Wires Wrote: Yeah... Probably not going to happen.
🤨 And why is that ?
(Oct 13, 2016 10:39 AM)◤Neko◥ Wrote: Keep this on the down low because this isn't very well known but on all Cpanel logins there is a little x on the top right corner of the CPanel Login Box. If you click that it just ignores the login and gives you access.
Was that a joke brww ? 😏🤣
* - device - Oct 13, 2016
Anything possible will be here: https://www.exploit-db.com/search/?action=search&description=cpanel
* - kpown - Oct 13, 2016
There is no universal way to gain admin access on a site. You need to probe the site for vulnerabilities. You can do this manually which takes time or you can do this with automated software like acunetix.
Once you have found a vulnerability, do research on how to exploit it and what exploiting it can do for you as the hacker.
Hope this cleared up the basic process OP
* - somejohndue - Oct 13, 2016
(Oct 13, 2016 10:40 AM)ʆɛѳɗɑʀkZ Wrote: 🤨 And why is that ?Use your brain. I promise you it's not difficult.
Was that a joke brww ? 😏🤣
* - ʆɛѳɗɑʀkZ - Oct 14, 2016
(Oct 13, 2016 11:16 AM)kpown Wrote: There is no universal way to gain admin access on a site. You need to probe the site for vulnerabilities. You can do this manually which takes time or you can do this with automated software like acunetix.
Once you have found a vulnerability, do research on how to exploit it and what exploiting it can do for you as the hacker.
Hope this cleared up the basic process OP
Thanks, at least I got 1 useful reply. 🙂
* - DarkMove - Oct 14, 2016
(Oct 13, 2016 10:36 AM)ʆɛѳɗɑʀkZ Wrote: Hi, could someone teach me how to bypass c-Panel login. Most of the sites are hosted from c-Panel, so it would be cool to know how to bypass the login page and get access to the admin privileges. Thanks in advance (:
Cpanel is the oldest control panel so unlikely to find new vulnerability, bypassing login page, either brute force, or Social Eng the website master
if you have site on the same server you can sometimes browse the files of the target
* - somejohndue - Oct 14, 2016
(Oct 14, 2016 04:11 AM)DarkMove Wrote: Cpanel is the oldest control panel so unlikely to find new vulnerability,ShellShock sends it's regards.
* - DarkMove - Oct 14, 2016
(Oct 14, 2016 05:44 AM)somejohndue Wrote: ShellShock sends it's regards.
ShellShock Serverside, Apache mod_cgi, and you have to get the whole link to .cgi file
one more thing from cpanel with love, WHM/Cpanel are on Auto-update always, don't get me wrong if you have account or shell inside you can do more
* - somejohndue - Oct 14, 2016
(Oct 14, 2016 06:11 AM)DarkMove Wrote: ShellShock Serverside, Apache mod_cgi, and you have to get the whole link to .cgi fileSomething tells me you completely missed my point.
one more thing from cpanel with love, WHM/Cpanel are on Auto-update always, don't get me wrong if you have account or shell inside you can do more
* - DarkMove - Oct 14, 2016
(Oct 14, 2016 06:37 AM)somejohndue Wrote: Something tells me you completely missed my point.I might, sorry but when you said ShellSock that's what I got
* - Vitani - Oct 14, 2016
This is not as easy as you think. You have to keep looking for possible vulnerabilities, and when you've found one try to exploit it.
There isn't some secret easy way aroud it.
* - somejohndue - Oct 14, 2016
(Oct 14, 2016 10:08 AM)DarkMove Wrote: I might, sorry but when you said ShellSock that's what I gotShellShock was discovered in Bash - It was developed 27 years ago. You said long-lasting software is less likely to be vulnerable, so I responded :)