+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: Website admin panel finder :'( ...(Experts Please don't ignore) (/showthread.php?tid=5733783)
Pages: Pages
1
2
Website admin panel finder :'( ...(Experts Please don't ignore) - Kevin_1998 - Oct 9, 2017
I have tried many options for website (it is http ) admin panel finder like KatanaFramework , WebSploit and also the perl script (tried from youtube) . but not getting the exact admin panel . Every time I failed . But does anyone has got a better solution to this problem if yes please share it with me and help me !
It is possible to hide admin panel from getting searched . please clear my doubts .
But I think that there is a way that I don't know .. So please help :)
Thank You !
* - Beladonis - Oct 9, 2017
Yes it is possible to hide the login page, for example, you rename the login page from "login.php" to something like "login123qwerty.php", if it's not indexed or linked to any other page, no web spider will be able to find it.
Or a CMS or some kind of web-based management system is running on another service, on another port (like 2082 for cPanel, 10000 for webmin, 8443 for Plesk ...)
You can also use htaccess to prevent people to access the login page without a cookie, a referer or things like that.
* - Kevin_1998 - Oct 10, 2017
any method which is superior to all methods to find the admin panel of the website
* - Baud - Oct 10, 2017
(Oct 10, 2017 01:51 AM)Kevin_1998 Wrote: any method which is superior to all methods to find the admin panel of the website
Vulnerabilities like directory traversal and path disclosure can reveal informations and contents of the folders hosted on the server, but you have to be lucky as these vulnerabilities aren't too common. Or you can try registering an account on the same hosting service and see where the admin page is at, just in case it wasn't changed but it's in an unusual path.
* - Kevin_1998 - Oct 10, 2017
So should I agree with that admin panel can't be found on some website ?
Please anyone who has experience with such stuff ... teach me if possible :|
* - Baud - Oct 10, 2017
If it's well hidden and you don't have access to the server itself then yes, sometimes it can't be found. Your last chance would be using dir buster to brute force it but it could take ages and you could overload the server with requests.
* - vorticalbox - Oct 10, 2017
(Oct 10, 2017 10:08 AM)Kevin_1998 Wrote: So should I agree with that admin panel can't be found on some website ?
Please anyone who has experience with such stuff ... teach me if possible :|
There might not even be on. Some web sites use static site generators and get updated by uploading via ftp.
* - Kevin_1998 - Oct 11, 2017
Okay Buddies , Thanks for reply :)
* - Mx. - Oct 11, 2017
just try out acunetix, and just crawl the site for login pages.
* - NightmareJoker - Oct 11, 2017
Look for a crawler, which will get all url routes for you.
RE: Website admin panel finder :'( ...(Experts Please don't ignore) - WPA2 - Nov 8, 2017
hint: look for logs scan with acuntix u will see www.site.com/Logs.txt or /error_log
RE: Website admin panel finder :'( ...(Experts Please don't ignore) - NinjaLeaks - Nov 8, 2017
I released this --> https://hackforums.net/showthread.php?tid=5505061 a bit ago, idk its open source you can mess with it a bit if you want :P
RE: Website admin panel finder :'( ...(Experts Please don't ignore) - botxfive - Nov 12, 2017
there is much sofwares and scripts google it bro
RE: * - SIM-1073426 - Nov 15, 2017
(Oct 11, 2017 10:55 AM)Mx. Wrote: just try out acunetix, and just crawl the site for login pages.
It've been a while since I saw a team INTRA member on here lol
RE: Website admin panel finder :'( ...(Experts Please don't ignore) - Ramb0x - Nov 15, 2017
I got admin finder coded in php if you got host i can upload it on.