+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: How can I grab user information through website? (/showthread.php?tid=5874875)
How can I grab user information through website? - stdio - Aug 17, 2018
Hello,
I am interested in gathering maximum information about user/visitor when he visits a web page. Are there already some websites that allow you to create a sub domain and you can check information about visitors?
I would like to know the applications/services installed on his system (especially antivirus information), operating system, computer name.
Thanks
RE: How can I grab user information through website? - CyberStrike - Aug 17, 2018
Well operating system shouldn't be too hard the user agent (of course it can be spoofed), something you should remember is that in IE you can run VBS scripts and wscript with the browser. Now below is an example for a login, of course with some vbs and some testing perhaps you can do more. Now I think for the VBS scripting to work a user has to have you added to their trusted zone. IE changes quite a bit here and there so the MSDN is a good place to look, I have seen a few results that mentioned Edge would drop activex & vbscript.
https://blogs.windows.com/msedgedev/tag/vbscript/
https://stackoverflow.com/questions/14221907/vbscript-to-launch-a-website-login
Here is an example using JS, of course you may not want to do a popup and instead just have it add the information into a database or something. Another thing is if this works then you can check the DNS cache, just make sure you resolve the IP's you probably will find that they will have already updated their AV, thus allowing for you to make an educated guess.
https://stackoverflow.com/questions/922476/how-can-i-read-the-clients-machine-computer-name-from-the-browser
RE: How can I grab user information through website? - stdio - Aug 17, 2018
(Aug 17, 2018 02:31 AM)sirru5h Wrote: Well operating system shouldn't be too hard the user agent (of course it can be spoofed), something you should remember is that in IE you can run VBS scripts and wscript with the browser. Now below is an example for a login, of course with some vbs and some testing perhaps you can do more. Now I think for the VBS scripting to work a user has to have you added to their trusted zone. IE changes quite a bit here and there so the MSDN is a good place to look, I have seen a few results that mentioned Edge would drop activex & vbscript.
https://blogs.windows.com/msedgedev/tag/vbscript/
https://stackoverflow.com/questions/14221907/vbscript-to-launch-a-website-login
Here is an example using JS, of course you may not want to do a popup and instead just have it add the information into a database or something. Another thing is if this works then you can check the DNS cache, just make sure you resolve the IP's you probably will find that they will have already updated their AV, thus allowing for you to make an educated guess.
https://stackoverflow.com/questions/922476/how-can-i-read-the-clients-machine-computer-name-from-the-browser
Thank you for your response, since its clear now that its possible I would like to expand on the discussion.
I do not have much knowledge regarding website development. So I am looking if there is such service available or someone who can do this as a job for me.
RE: How can I grab user information through website? - CyberStrike - Aug 17, 2018
Well, I am sure that in the Market you can find someone.
RE: How can I grab user information through website? - romyhack - Aug 18, 2018
How do i hack a website admin?
RE: How can I grab user information through website? - CyberStrike - Aug 18, 2018
(Aug 18, 2018 05:11 AM)romyhack Wrote: How do i hack a website admin?
Ouch that has nothing to do with any of this.