+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: Access Backend or CMS (/showthread.php?tid=6262748)
Access Backend or CMS - DuplexnNYC - Feb 2, 2024
I want to access the backend of a site that is trying to sell some BS Defi token. I want to f with them. Any help out there?
RE: Access Backend or CMS - Nemo5 - Feb 27, 2024
You can perform vulnerability scanning using tools like Nessus, OpenVAS, or Burp Suite to identify any weaknesses or security flaws in the website's backend infrastructure. Look for common vulnerabilities such as SQL injection, directory traversal, or insecure file uploads.
Or you can attempt to gather additional information or access credentials through social engineering techniques. This could involve phishing attacks, pretexting, or impersonation to trick individuals with access to the backend into providing login credentials or other sensitive information.
RE: Access Backend or CMS - linkinpork - Feb 27, 2024
(Feb 2, 2024 04:02 PM)DuplexnNYC Wrote: I want to access the backend of a site that is trying to sell some BS Defi token. I want to f with them. Any help out there?
Hi,
- Use something like Wappalyzer to find the CMS version.
- You know the CMS now, so the admin login page should be predictable.
- Use a CMS-specific scanner.
Drupal has this: https://github.com/SamJoan/droopescan
Wordpress has this: https://github.com/wpscanteam/wpscan
Joomla has this: https://github.com/OWASP/joomscan
Have fun!
RE: Access Backend or CMS - qwerty42 - Mar 1, 2024
I just tried Wappalyzer on a website that I know is Umbraco and it was wrong. It said it was Drupal CMS
RE: Access Backend or CMS - famedgod6 - Mar 1, 2024
you could use NMAP to scan for open ports and the versions of those ports and use something like searchsploit or exploit-db to find something you can exploit, then fire up metasploit framework and exploit it,
thats just one way, I know many other ways