Hey Guys, Just to get a couple of things straight, im not a complete noob when it comes to hacking ect. But I do need help sometimes.
I was recently into searching up how to attack/hack websites. Like sql injections, xss and stuff like that. So i went on a website to try it out and found the website wasn't vulnerable to any of these methods. But I'm pretty sure it's very insecure. I scanned the website using vega v1.0 (Kali linux) and it said it had heaps of stuff (but could be also false-positives, but the problem is i don't know if they are and need to try them out but don't know how to) which include,
.Cleartext Password over http (The site is also using http, not https which might come in handy while sniffing for passwords and stuff, but people would rarely login to the site)
.Cross-Site Script Include (Pretty sure that means the site is vulnerable to xss)
.Possible Social Security Number Detected (Not needed)
.Possible SQL-Injection (Think this is a false-positive)
and many more in the High Risk section. Im wondering how would I use these vulnerabilities if they aren't false-positives, and if you manage to hack/gain control of this website, please let me know how. I was just wondering are there any ways of hijacking, dns spoofing, or hacking the website for me to display a particular html line of code. I'm simply trying to do this attack to learn more about hacking and attacks in general & also to gain an understanding on scanning then exploiting a particular vulnerability.
It would be awesome for someone to respond with some feedback or help on how to actually do this attack on the site.
Also, if you think I am doing things wrong like using vega or something, let me know, and tell me how you guys do stuff :D
Quick Vega Scan (Not a full scan of it, there are a lot more vuleranbilties): prntscr.com/7wqugk
Website trying to gain access to: cccgympie.qld.edu.au
Email me: [email protected]
Skype: exodian_exodus
I was recently into searching up how to attack/hack websites. Like sql injections, xss and stuff like that. So i went on a website to try it out and found the website wasn't vulnerable to any of these methods. But I'm pretty sure it's very insecure. I scanned the website using vega v1.0 (Kali linux) and it said it had heaps of stuff (but could be also false-positives, but the problem is i don't know if they are and need to try them out but don't know how to) which include,
.Cleartext Password over http (The site is also using http, not https which might come in handy while sniffing for passwords and stuff, but people would rarely login to the site)
.Cross-Site Script Include (Pretty sure that means the site is vulnerable to xss)
.Possible Social Security Number Detected (Not needed)
.Possible SQL-Injection (Think this is a false-positive)
and many more in the High Risk section. Im wondering how would I use these vulnerabilities if they aren't false-positives, and if you manage to hack/gain control of this website, please let me know how. I was just wondering are there any ways of hijacking, dns spoofing, or hacking the website for me to display a particular html line of code. I'm simply trying to do this attack to learn more about hacking and attacks in general & also to gain an understanding on scanning then exploiting a particular vulnerability.
It would be awesome for someone to respond with some feedback or help on how to actually do this attack on the site.
Also, if you think I am doing things wrong like using vega or something, let me know, and tell me how you guys do stuff :D
Quick Vega Scan (Not a full scan of it, there are a lot more vuleranbilties): prntscr.com/7wqugk
Website trying to gain access to: cccgympie.qld.edu.au
Email me: [email protected]
Skype: exodian_exodus
