Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact

Im not a newbie, but i have a newbie question

I don't have time to right now, but you can try to get the Admin login via SQLi or XSS or RFI/LFI and get all of the logs there.
If you're not a noob you should know that something named "SQL injection" excist. Noob
Check out the Social Engineering section, I think that may be one of the few options you have got.
what about bruteforcing? Or does it has protection?
So, you're basically trying to get someones login here, am I mistaken? If so, I would just use a credential harvester.. you could use an attached PDF or a number of exploits depending on the OS they're using.. A better way may be to use something like SSLStrip if you have access to the network, and it wouldnt be too hard to grab the login so long as they hit it while you're sniffing..
(Aug 5, 2010 11:25 AM)curewins Wrote:  So, you're basically trying to get someones login here, am I mistaken? If so, I would just use a credential harvester.. you could use an attached PDF or a number of exploits depending on the OS they're using.. A better way may be to use something like SSLStrip if you have access to the network, and it wouldnt be too hard to grab the login so long as they hit it while you're sniffing..

Most likely linux (If this is a website).

SQLi is your best bet.
(Aug 5, 2010 11:32 AM)`P R O D I G Y™ Wrote:  Most likely linux (If this is a website).

SQLi is your best bet.

SQLi would be a good choice, but if you cant find a vuln in there, then the only way would be to rob the mother.. Is the user out of your reach or do you have access to the local net?


Possibly Related Threads...
Thread / Author Replies Views Last Post
by deocuteNov 5, 2009 03:19 AM 1 69 Nov 5, 2009 03:19 AM
Last Post: hoLe[R]a