[joomlafkr]

Actually i was writing on the same subject but you did fine !
i had like 1 other way to find the admin panel that will make finding it to be 100% :p

Nice job there dude !

[TwinBlade]

Nice, am downloading it now..
and btw, does every website must have an admin login page?
cuz some doesnt seem to have any..

and btw, great text designs..

[Exploithero]

Niceee!! Very helpfull thread! Bookmarked;) :D thanks

[Volim te]

Nice thread to bad some people don't use robots.txt to disallowed admin pages been indexed )-; and why use ftp.site.com or site.com:21? Just try ftp://site.com

[Keif]

Stop being so HQ man you're killing me xD

[Volim te]

Nice, am downloading it now..
and btw, does every website must have an admin login page?
cuz some doesnt seem to have any..

and btw, great text designs..

No lots of people just use CPanel or something unless it's a user login kind of site.

[Volim te]

That's not completely true.
If you're a good webmaster (Which people really try to be, because they want money) they'll add a User Admin Login, so that they can actually understand what they're doing.

But yeah, not ALL sites will have custom admin pages, but if you find Admin Credentials, obviously there's one hidden somewhere right?

OH YEAH! I forgot to add that you can check the normal user login aswell.

Very true but the admin credentials might not even be for that script Say the page /index.php?id=xyz is vul I select the DBs that MySQL user is using and bam I find mybb_database etc if you get what I mean.
Anyway I find mass file checking works well if there is not allowed files in robots.