[Pottercypher]

Hi Hack Forum

What is the most effective method or tools to extract sensitive information (usernames & password) from websites that are not vulnerable to sql injection and cross site scripting?

Thank you in advance

[IDK]

knowledge is power learn more more methods like lfi ,rfi ,rce malacious file download etc etc
also gather info about the target if it's using any cms try to scan for vul plugins

[Pottercypher]

^ I 100% agree with you that knowledge is power.

Infact I joined HF to acquire more knowledge in hacking.

Joomscan and uniscan could not detect any vulnerability on the targeted website.

The site has firewall and security plugins to prevent attack on the targeted website.

The site is up to date and there is no vulnerability found by uniscan and joomscan.

I am after the targeted website usernames and passwords. So what are the methods to extract websites usernames and passwords?

Can you also explain further on lfi, rfi, rce and malacious file download?

Thank you

[skittlesforgiggle]

^ I 100% agree with you that knowledge is power.

Infact I joined HF to acquire more knowledge in hacking.

Joomscan and uniscan could not detect any vulnerability on the targeted website.

The site has firewall and security plugins to prevent attack on the targeted website.

The site is up to date and there is no vulnerability found by uniscan and joomscan.

I am after the targeted website usernames and passwords. So what are the methods to extract websites usernames and passwords?

Can you also explain further on lfi, rfi, rce and malacious file download?

Thank you

What website you want to hack? I can help you out.

[Pottercypher]

^ Do you mind telling us your method of hacking and extracting sensitive information from targeted website? Your answer will be beneficial to many on hack forum. Thank you

[beachkid]

Hack sites these days are very hard to do even one with low security it's almost impossible like i'm trying to get users and pass from MyLOL of the recent hackers that been on there so maybe there is an method that we can use to get them and i know MyLOL has an ftp server on it just haven't figured out it at all and I did tried SQL injection didn't work at all

[ProblemSolva]

Hack sites these days are very hard to do even one with low security it's almost impossible like i'm trying to get users and pass from MyLOL of the recent hackers that been on there so maybe there is an method that we can use to get them and i know MyLOL has an ftp server on it just haven't figured out it at all and I did tried SQL injection didn't work at all

Maybe for noobs yes, but if you know what you are doing its a whole different story..

[Pottercypher]

^ Can you tell us your story because I am having difficulties hacking website that is why I asked this question of extracting sensitive informations from website.

Do you know that most sql vulnerable websites removed their admin panel thereby making hacking their sites useless.

I don't even use automated sql tools again bcos it is a wasted effort.

Most sites vulnerable to sql injections these days don't have any valuable contents and they even remove their admin page. Only few leave their admin page.

I am still learning metasploit in kali linux and I am at the beginners level of metasploit.

So since I can't hack websites that are not vulnerable to sql injection and xss, let me at least extract sensitive informations from these secured sites.

Can somebody put me through on how to extract sensitive information from websites that are not vulnerable to sql injection and xss?

Am waiting for your answers. Your answers are highly appreciated!

Thank you

[๖ۣۜƙ!ʟʟabiтs.~]

Dont lose your time with SQL Injection and others, you can try to hack a lot of websites with a vulnerable CMS (Wordpress, Joomla), etc.
In this section there are a lot of tutorials!

[mon436]

Hack sites these days are very hard to do even one with low security it's almost impossible like i'm trying to get users and pass from MyLOL of the recent hackers that been on there so maybe there is an method that we can use to get them and i know MyLOL has an ftp server on it just haven't figured out it at all and I did tried SQL injection didn't work at all

LMAO!!! SKID..... trying sql injections on an FTP server... LMAO!!

[Anonoobhopefull]

Im currently trying to find POST data on two Neo-Nazi sites. One being a honest Nazi website,
the other claiming to be for kids, but once you look through it,
It's a obvious fricken Nazi site.
one wordpress one Go daddy.
using wireshark,Npmap and cain.