+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: Logins without SSL Certificate (/showthread.php?tid=5552572)
Logins without SSL Certificate - theChive - Feb 15, 2017
Came across a new site that represents a local company. It lacks an SSL certificate across the entire site and contains PHP login scripts.
I'm pretty new to pentesting and was wondering what are some common methods for taking advantage of this vulnerability?