Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact

Need help on how to deface websites [EDUCATIONAL PURPOSES ONLY!]

I need someone who is skilled in defacing websites to teach me how to deface either through SQLI or anything else really all help is appreciated
Skype - Danarthy🤝
Seriously lol that educational purposes thing isn't necessary. Everyone knows why you're here, it's cool.

So let's start from the top yeah?

You find your vulnerable site, let's say it's site.com

You find the vuln, eg site.com/index.php?id=1, find the type of SQLi it is and then get to work

You wreck that bitch and make it fall apart, get that admin panel open and then upload a shell, once your shell is hot you can easily deface the site, or just sit there and wait for your shell to be backed up so it's always there, root the box or just chill.

Also it's a pretty bad idea to post your skype here bro, that shit'll get ddosed real quick

EDIT: I just considered the possibility that you have no idea how to do SQLi, just use the search function up the top "SQLi tutorial" and you'll be set.

I wrote one a little while back, here
[Image: q2bcziS.jpg]
-CLOSE THREAD PLEASE-
No longer needed!
(Nov 15, 2014 08:50 PM)Natalie Portman Wrote:  Seriously lol that educational purposes thing isn't necessary. Everyone knows why you're here, it's cool.

So let's start from the top yeah?

You find your vulnerable site, let's say it's site.com

You find the vuln, eg site.com/index.php?id=1, find the type of SQLi it is and then get to work

You wreck that bitch and make it fall apart, get that admin panel open and then upload a shell, once your shell is hot you can easily deface the site, or just sit there and wait for your shell to be backed up so it's always there, root the box or just chill.

Also it's a pretty bad idea to post your skype here bro, that shit'll get ddosed real quick

EDIT: I just considered the possibility that you have no idea how to do SQLi, just use the search function up the top "SQLi tutorial" and you'll be set.

I wrote one a little while back, here

(Jan 10, 2015 09:18 AM)Dea7h Wrote:  -CLOSE THREAD PLEASE-
No longer needed!

Yeah that tutorial was pretty top notch. Good luck Death.
(Nov 15, 2014 08:50 PM)Natalie Portman Wrote:  Seriously lol that educational purposes thing isn't necessary. Everyone knows why you're here, it's cool.

So let's start from the top yeah?

You find your vulnerable site, let's say it's site.com

You find the vuln, eg site.com/index.php?id=1, find the type of SQLi it is and then get to work

You wreck that bitch and make it fall apart, get that admin panel open and then upload a shell, once your shell is hot you can easily deface the site, or just sit there and wait for your shell to be backed up so it's always there, root the box or just chill.

Also it's a pretty bad idea to post your skype here bro, that shit'll get ddosed real quick

EDIT: I just considered the possibility that you have no idea how to do SQLi, just use the search function up the top "SQLi tutorial" and you'll be set.

I wrote one a little while back, here

Once again you make yourself sound like an utter skid, only this time when I call you out on it you can't neg rep me and not respond. You're actually one of the funniest members on here. And by funny I mean pitiful. Try actually looking into other vulnerabilities beside Sql, there is more to website hacking, and also assuming all servers will backup files is stupid. Instead you'd be better placed putting a backdoor onto the server
(Nov 15, 2014 08:50 PM)Natalie Portman Wrote:  Snipppp

I hate sqli injections, i use havij, it works nice for finding sites with dorks. Just enter the site name and search for vulnerabilities, although it's always easier to learn by doing the full process. most of these sites have already been defaced, hacked, or so. It's hard to find a site that hasn't been hacked with sqli, that's still vulnerable.
Hmm via SQLi, is basically you would find the SQLi exploit, and you can either manually or used an automated tool to get the Databases, (SQLMAP is recommended).

Once you get the Databases and hopefully get the admin details, (you might have to crack a hash), you get into the Admin Panel if there is one on the website. Usually it might /admin.php, etc. You can also use an admin scanner to find the page.

Then if it allows you to upload you can upload a shell. You can download number of shells from http://r57.gen.tr and remember to open it with Notepad and edit the details like the password, etc.

So try to see if you are allowed to upload via the Admin Panel, and if it's JPEG you can spoof the shell to be shell.php.jpg and you can upload it that way or via Tamper Data. Once the shell is uploaded, just go on http://www.site.com/shellname.php an you will have access to the shell.

You will see all the files on the server, and to simply deface, upload your own index file, and you are done.

This is just a general way of doing it, there are a lot more ways, I suggest you go read the many tutorials in this section!
This is way too simplified and using a shell from r57 is most likely going to be backdoored.
(Jan 11, 2015 06:33 AM)TheWholeWorldExplodes Wrote:  This is way too simplified and using a shell from r57 is most likely going to be backdoored.

Correct it is simplified as there are numerous of tutorials literally in this section.


Possibly Related Threads...
Thread / Author Replies Views Last Post
by EM55SUEZMay 8, 2024 04:18 PM 4 189 May 8, 2024 04:18 PM
Last Post: EM55SUEZ
by ahmedfirst56Feb 26, 2017 12:46 AM 17 425 Feb 26, 2017 12:46 AM
Last Post: ahmedfirst56
by -[ ZeroThunder Hacker ]-Nov 13, 2016 10:08 AM 320 8,790 Nov 13, 2016 10:08 AM
Last Post: Captain Steve Rogers