+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: Website DB exploitation (/showthread.php?tid=6305667)
Website DB exploitation - darkguide - Aug 13, 2025
Hello guys,
Recently ...2023 this game www.talismanonline.com that has a support page www.miragame.com was hacked. Hackers managed to acess DB, prior to that it was hacked also, as you can check here https://www.youtube.com/@prometheus847(this guy did it and posted some vids).
Ive lost over 3kUSD and the support wont do anything to recover my things online so ive been diggin into website, and i am in need for some guidance.
Ive ran nikto scans , tried to reach their mysql(unauthorized), nmap scans . zap scans with diverse flaws , looked for s3 buckets and i just cant find the path.
Would like to know if someone could help me so they pay for the damage they did, they acting like mercenary and my CC provider say they cant refund thing cause had been to long.
Thanks in advanced
RE: Website DB exploitation - pwningtheunpwned - Sep 9, 2025
Have you tried sqlmapping all their parameters and forms? I'd recommend running sqlmap on the POST request data you found on ZAP, forms with --forms (it's simple) and on parameters. Have you tried to perform web enumeration with gobuster and dirb for maximal results? If an admin page was found, consider brute forcing it and using sqlmap first.
Have you tried doing recon on their CMS (if they have one)? Have you tried further enumerating the gobuster results if the scans were done to find the versioning of the software used to find a possible exploit?
RE: Website DB exploitation - Bshol - Sep 11, 2025
You can target other domains that are hosted on the same server with that platform.
RE: Website DB exploitation - ciadiscret - Sep 12, 2025
(Aug 13, 2025 04:29 AM)darkguide Wrote: Hello guys,
Recently ...2023 this game www.talismanonline.com that has a support page www.miragame.com was hacked. Hackers managed to acess DB, prior to that it was hacked also, as you can check here https://www.youtube.com/@prometheus847(this guy did it and posted some vids).
Ive lost over 3kUSD and the support wont do anything to recover my things online so ive been diggin into website, and i am in need for some guidance.
Ive ran nikto scans , tried to reach their mysql(unauthorized), nmap scans . zap scans with diverse flaws , looked for s3 buckets and i just cant find the path.
Would like to know if someone could help me so they pay for the damage they did, they acting like mercenary and my CC provider say they cant refund thing cause had been to long.
Thanks in advanced
your service, yu wanna hack ?? explain me, the job to do , im ready
RE: Website DB exploitation - binxzzz - Oct 21, 2025
i have a lot of websites need hackers to attack!
i will pay via BTC! for me contact of u !
(Sep 11, 2025 03:09 PM)Bshol Wrote: You can target other domains that are hosted on the same server with that platform.
i have a lot of websites need hackers to attack!
i will pay via BTC! for me contact of u !