+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Beginner Hacking (https://hackforums.net/forumdisplay.php?fid=4)
+---- Thread: Can I hack a website to find unreleased or hidden pages on the site? (/showthread.php?tid=6301855)
Can I hack a website to find unreleased or hidden pages on the site? - eskiboy - Jul 1, 2025
I'm a football fan, and my favourite club is set to announce a signing today. Is there any way I can hack into the website to find hidden pages that aren't yet public, or maybe hack into the images file to find images that haven't been uploaded yet? I have tried looking at the sitemap.xml, and using inspect element to look around at the code to see anything that might suggest a big announcement but nothing too interesting there. Is this something I can do?
RE: Can I hack a website to find unreleased or hidden pages on the site? - DramaKing - Jul 1, 2025
(Jul 1, 2025 06:30 AM)eskiboy Wrote: I'm a football fan, and my favourite club is set to announce a signing today. Is there any way I can hack into the website to find hidden pages that aren't yet public, or maybe hack into the images file to find images that haven't been uploaded yet? I have tried looking at the sitemap.xml, and using inspect element to look around at the code to see anything that might suggest a big announcement but nothing too interesting there. Is this something I can do?
If a page exists but hasn't been linked, you could use tools like dirbuster/dirb/dirsearch/gobuster to enumerate those URLs. But that's not going to happen. Likely the club has a CMS, and you will need a login to see drafts of posts before they are published. They're probably published at a scheduled time. Abusing a vulnerability is also a possibility, particularly with WordPress. Better yet, crack an email account.