+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: Teach Me how to hack the database of a website (/showthread.php?tid=5809766)
Teach Me how to hack the database of a website - flagjack - Mar 9, 2018
I'm really interested in hacking and I all-ways thought it was impossible until I found hackforums.net where I can learn
so me and my friend own this website beautifulcraft.ru and we were interested how it could be hacked so we can later improve it and learn at the same time
RE: Teach Me how to hack the database of a website - ThomasGB - Mar 9, 2018
check your forum IPS version if it has any vulns
avoid sql injections
RE: Teach Me how to hack the database of a website - SIM-974023 - Mar 11, 2018
Why do you recommend avoiding SQLi?
RE: Teach Me how to hack the database of a website - V3N0M - Mar 12, 2018
(Mar 11, 2018 08:08 PM)Prodigal Wrote: Why do you recommend avoiding SQLi?
are there still any sites that you can SQLi really?
RE: Teach Me how to hack the database of a website - FamousHater - Mar 12, 2018
i would teach u op but u havent done anything for HF
RE: Teach Me how to hack the database of a website - ernestmiller - Mar 13, 2018
Just use Burpsuite Pro it has everything for web app pen tetsing proxy all the traffic as you manually traverse your site analyse every parameter for possible injection, brute force with Intruder on login forms, Repeater to repeat quest and see how the server handles input.
For a scanner use Nikto, not Vega its full of false positives, also use OWASP ZAP proxy to spider the site and dirbuster.
Yeah SQLI is not really around anymore and if you have a WAF its going to be to try and bypass, may be worth running through sqlmap though on any parameters that are potentially vulnerable