[Triops]

How would I got about finding an exploit in a website I plan on trying to hack? I know about pentesting and all of that, but other than that, what are other ways of doing it? I also know of finding vulns in products they use like OpenCart.

Any tips would be appreciated.

[Ｅssence]

Good starter for people like you is Sqlmap. Download Kali Linux and install it on a virtual machine and lookup some tutorials.

[Triops]

Good starter for people like you is Sqlmap. Download Kali Linux and install it on a virtual machine and lookup some tutorials.

I've already tried using SQLmap, none of the urls on the site or the store page are injectable. Unless i'm missing something entirely obvious. I've also tried XSS but haven't gotten anything yet

[Insurmountable]

A great idea when trying to hack a site is identifying what plugins / web frameworks they are running (in this case it's OpenCart) and then searching for exploits on a site like exploit-db.com

Example: I found a remote code execution exploit for OpenCart versions 2.1.0.2 to 2.2.0.0
URL: exploit-db.com/exploits/39679/

If that one doesn't work you can keep looking for more at exploit-db.com/search

[Teferi]

I've already tried using SQLmap, none of the urls on the site or the store page are injectable. Unless i'm missing something entirely obvious. I've also tried XSS but haven't gotten anything yet

"Unless i'm missing something entirely obvious." are you sure the URL's you blindly enter in SQLmap are even vulnerable?..

[Triops]

A great idea when trying to hack a site is identifying what plugins / web frameworks they are running (in this case it's OpenCart) and then searching for exploits on a site like exploit-db.com

Example: I found a remote code execution exploit for OpenCart versions 2.1.0.2 to 2.2.0.0
URL: exploit-db.com/exploits/39679/

If that one doesn't work you can keep looking for more at exploit-db.com/search

Yeah, I already saw that exploit on another site and I even know how to do it myself, but I was hoping for one that wouldn't require the admin to have to look at a page for it to take effect.

[Dark TruTH]

How would I got about finding an exploit in a website I plan on trying to hack? I know about pentesting and all of that, but other than that, what are other ways of doing it? I also know of finding vulns in products they use like OpenCart.

Any tips would be appreciated.

Man try to hack other sites hosted on that server using sql injection and then use symlink to access the config file of the your target site and get there mysql uname and pass from the config file....

[Disparity]

Good starter for people like you is Sqlmap. Download Kali Linux and install it on a virtual machine and lookup some tutorials.

Please please please please please please please please please please please please please please please please please please please please pleaseNo

OP, let me tell you this: If you want to be a 'hacker', an actual hacker, who doesn't just run acunetix or use dorks, learn PHP, SQL, and Javascript. I want to be a good 'hacker', so that's what I'm doing too.

Don't listen to anyone who instantly refers you to using fucking Kali linux. 100% guarantee they know nothing.

[Cxdde3990xc]

Good starter for people like you is Sqlmap. Download Kali Linux and install it on a virtual machine and lookup some tutorials.

Terrible Terrible advice

[Triops]

Please please please please please please please please please please please please please please please please please please please please pleaseNo

OP, let me tell you this: If you want to be a 'hacker', an actual hacker, who doesn't just run acunetix or use dorks, learn PHP, SQL, and Javascript. I want to be a good 'hacker', so that's what I'm doing too.

Don't listen to anyone who instantly refers you to using fucking Kali linux. 100% guarantee they know nothing.

I'm already learning PHP as a developer on a small social networking site. I know some basics of SQL and Javascript already, just need to refreshen my memory.

---

Man try to hack other sites hosted on that server using sql injection and then use symlink to access the config file of the your target site and get there mysql uname and pass from the config file....

They are hosted on a dedicated server so i'm not sure that's possible to do.

[Elitas]

Please please please please please please please please please please please please please please please please please please please please pleaseNo

OP, let me tell you this: If you want to be a 'hacker', an actual hacker, who doesn't just run acunetix or use dorks, learn PHP, SQL, and Javascript. I want to be a good 'hacker', so that's what I'm doing too.

Don't listen to anyone who instantly refers you to using fucking Kali linux. 100% guarantee they know nothing.

Although I agree with you, Kali Linux is still used by people like myself who know PHP, mySQL and Javascript.

tbh i dont use it that much... but it's still pretty useful.

i wouldnt rule it out is all.

[STRYAN]

Please please please please please please please please please please please please please please please please please please please please pleaseNo

OP, let me tell you this: If you want to be a 'hacker', an actual hacker, who doesn't just run acunetix or use dorks, learn PHP, SQL, and Javascript. I want to be a good 'hacker', so that's what I'm doing too.

Don't listen to anyone who instantly refers you to using fucking Kali linux. 100% guarantee they know nothing.

Out of any advice the above is probably best if im honest.
I know asking for advice is good but... learning yourself and giving yourself that buzz of "ive done something good" will make you feel alot better rather than getting someone else to spoon feed you. GG Disparity

[Disparity]

Although I agree with you, Kali Linux is still used by people like myself who know PHP, mySQL and Javascript.

tbh i dont use it that much... but it's still pretty useful.

i wouldnt rule it out is all.

I'm not saying Kali linux is useless. I'm saying some of the worst advice you can give to someone looking to start hacking is to go straight to kali.

[Elitas]

I'm not saying Kali linux is useless. I'm saying some of the worst advice you can give to someone looking to start hacking is to go straight to kali.

From personal advice, you should go straight to Kali. Become a skid, then un-skid yourself.

Just learning how to program in PHP takes way longer than using Kali, then learning what you gotta learn in PHP to hack. Just my thought, learn the two at the same time.

[Triops]

From personal advice, you should go straight to Kali. Become a skid, then un-skid yourself.

Just learning how to program in PHP takes way longer than using Kali, then learning what you gotta learn in PHP to hack. Just my thought, learn the two at the same time.

I definitely know the frustration of learning PHP, the language is so difficult to learn, especially with PHPFox.