+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: Defacing websites learning (/showthread.php?tid=6278063)
Defacing websites learning - boogasystem - Aug 19, 2024
I'm trying to learn everything I can about hacking, but one thing that has came up lots was defacing, how do people just instantly know what to do to deface any website? even if its a new thing they've never defaced before, for example shopify websites, wix websites, wordpress websites, how do they just know what to do without watching a tutorial, is it some special software?
RE: Defacing websites learning - Bastille - Aug 19, 2024
Defacing is the action of changing the appearance of a website, usually to promote services on someone's else website, for political / religion reasons, or to troll.
There is no tools such as "Automated Defacer 3000", instead you use "usual" vulnerabilities such as SQL injections, LFI, and so on, to gain access to the server, and then change the source code of the web page stored in files.
For other platforms like Shopify or Wix, hackers can also steal owner's credentials, access the control panel, change the email address, the logins, and then deface the website.
RE: Defacing websites learning - T3n - Aug 19, 2024
There's nothing special nor an software that will let you press a button and deface the website. It takes time, knowledge and persistence. HTB has some useful courses related to web pen testing. Otherwise just start learning.
People don't deface websites that easy. It takes time to find the flaw, some logic on how to do it and so on.
You won't be able to deface a website just by looking at a tutorial.
RE: Defacing websites learning - Ecca - Aug 19, 2024
(Aug 19, 2024 03:18 AM)Tenebris_ Wrote: You won't be able to deface a website just by looking at a tutorial.
Actually that's not entirely true, you can follow a SQL injection tutorial and deface a website.
RE: Defacing websites learning - Nightshader - Aug 22, 2024
There actually is some scripts that auto deface but their not real defaces in my opinion. They are from file upload webshells and image uploaders. This is the easy way. But Shelling has a big market and it does work. And there are many other things to do with webshells besides defacing. You can access files on the site execute commands and database access. I like to fuck around with shells and hack my devices and friends when im bored.
RE: Defacing websites learning - T3n - Aug 22, 2024
(Aug 19, 2024 04:18 AM)Ecca Wrote: Actually that's not entirely true, you can follow a SQL injection tutorial and deface a website.
Not every website is vulnerable to that. Some people think before writing codes.
RE: Defacing websites learning - boogasystem - Aug 22, 2024
(Aug 22, 2024 08:35 AM)Tenebris_ Wrote: Not every website is vulnerable to that. Some people think before writing codes.
i saw a tutorial and you can check if its vulnerble to sqli
RE: Defacing websites learning - T3n - Aug 22, 2024
(Aug 22, 2024 08:50 AM)boogasystem Wrote: i saw a tutorial and you can check if its vulnerble to sqli
Alright then, go deface websites. :)