+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: Admin page finder bruteforce (/showthread.php?tid=6085760)
Admin page finder bruteforce - sapalapa - Jun 8, 2020
Hello I did try at least 10-20 tools to find admin page of some server, used many known worldlist with usual admin page, but non did find it. Looks like they use some very custom login page url. How could I find it by some brute force method?
RE: Admin page finder bruteforce - ironingboard - Jun 8, 2020
Maybe a more targeted approach? Read source code / lookup IT staff / on LinkedIn / lookup archived versions to find hints on what web technology is used.
Based on the web technology you hopefully can do some research to find the admin url.
RE: Admin page finder bruteforce - sapalapa - Jun 8, 2020
I used many vulnerability scanners, directory scan also..... I did manage to get into database and get admin username and password in MD5 data but I cant find the admin login page.
RE: Admin page finder bruteforce - Dotexe - Jun 8, 2020
(Jun 8, 2020 11:55 AM)sapalapa Wrote: I used many vulnerability scanners, directory scan also..... I did manage to get into database and get admin username and password in MD5 data but I cant find the admin login page.
Yeah not only that the scanners are noisy af, but they tend to give you a false information
RE: Admin page finder bruteforce - frank3nstien - Jun 8, 2020
(Jun 8, 2020 06:01 AM)sapalapa Wrote: Hello I did try at least 10-20 tools to find admin page of some server, used many known worldlist with usual admin page, but non did find it. Looks like they use some very custom login page url. How could I find it by some brute force method?
I familiar with one blog which is pretty old for now written by someone, but its helped me still sometimes and i bookmarked the page, maybe you can give it a try
I will send u PM
RE: Admin page finder bruteforce - ETH - Jun 8, 2020
Use gobuster to find out the hidden directories and make sure you have good wordlist
RE: Admin page finder bruteforce - sapalapa - Jun 9, 2020
Here is server IP if someone could try to find login page:
45.147.197.194
RE: Admin page finder bruteforce - frank3nstien - Jun 9, 2020
(Jun 9, 2020 01:00 PM)sapalapa Wrote: Here is server IP if someone could try to find login page:
45.147.197.194
This server don't have any admin or login page brother so you cannot find, the only option is there is open SSH that's the only way.
RE: Admin page finder bruteforce - sapalapa - Jun 10, 2020
How dont have if I managed to get 3 admins user and pass from database