It's a .edu site, better keep off your hands before the feds knock at your door.
How would I go about defacing this site? |
(Jun 3, 2015 12:52 AM)Th3PonyWizard Wrote: every time acunetix is recommended another kitten commits suicide Although I agree sometimes Acunetix is not the best vulnerability scanner out there. However, it does pick up a good majority of corrupt code. You also have to worry about Acunetix reporting false positives. However, Acunetix is a fairly good web scanner out there to gather information on a target. They have default presets, you may need to enter your own code. (May 31, 2015 08:22 AM)mdt3ch Wrote: I have read about xss, rfi, fli, and sqli for website defacing. Try some of these tools: mediafire.com/folder/yb3fy22w4dvrr/Security_Tools Site Admin Login: sscrmnl.edu.ph/wp-login.php?redirect_to=http%3A%2F%2Fsscrmnl.edu.ph%2Fwp-admin%2F&reauth=1 (Jun 3, 2015 12:31 PM)R00t M4st3r Wrote: Although I agree sometimes Acunetix is not the best vulnerability scanner out there. However, it does pick up a good majority of corrupt code. You also have to worry about Acunetix reporting false positives. However, Acunetix is a fairly good web scanner out there to gather information on a target. They have default presets, you may need to enter your own code. It also stands out like a clown in a synagogue in webserver logs. Its pretty much the best way to get the server admins attention aside from sending him an email saying "hai can i heck ur server pl0x" (Jun 3, 2015 01:18 PM)WubCannon Wrote: It also stands out like a clown in a synagogue in webserver logs. Its pretty much the best way to get the server admins attention aside from sending him an email saying "hai can i heck ur server pl0x" There server also doesn't support proxy blocking. So, even though your basically knocking on the door, you can knock on the door, using different people. s27.postimg.org/zfwd4l3jn/Untitled.png sscrm.pinnacle.com.ph/sansebastian/students/index.php Btw, it has a SQL injection vulnerability. (Jun 3, 2015 03:52 PM)R00t M4st3r Wrote: There server also doesn't support proxy blocking. So, even though your basically knocking on the door, you can knock on the door, using different people. its not all about bruting your way in. Most likely OP wants to change his grades or hack his school. As soon as an admin checks the logs they are going to know something is up. (Jun 4, 2015 01:13 AM)Rilit Wrote: After few days you post a thread "What i do, Police took my PC". lol Police actually need a warrant to take your belongings. Even if there on your person. Time they get the warrant. You can break your computer, reformat your hard drive. Encrypt your data. There's tools where they can go back and unscramble the reformatted data and see what you been doing. But who cares haha most of the time if you are smart about it you won't get caught. (Jun 4, 2015 12:45 PM)R00t M4st3r Wrote: Police actually need a warrant to take your belongings. Even if there on your person. Time they get the warrant. You can break your computer, reformat your hard drive. Encrypt your data. There's tools where they can go back and unscramble the reformatted data and see what you been doing. But who cares haha most of the time if you are smart about it you won't get caught. > need a warrent > noshit.jpg > break RAM > dissasemble hard drive + use magnets, hammer, flames as well as AES 256bit encryption. > they can still go back and 'usncramble the data' > unscramble pls. (Jun 4, 2015 08:09 PM)WubCannon Wrote: > need a warrentRAM is a volatile storage unit. Completely erasing it is as simple as plugging it off. (Jun 5, 2015 06:21 AM)Th3PonyWizard Wrote: RAM is a volatile storage unit. Completely erasing it is as simple as plugging it off. Everyone knows you can perform coldboot attack on DRAM and SRAM. If the police are going to raid your house for a computer crime, they will either ensure the computer is kept on, or perform a rapid coldboot attack, with some RAM models being susseptible to this attack for upto several hours if the system is cooled, but even upto 2 minuites on DDR2 |
|
|