I have read about xss, rfi, fli, and sqli for website defacing.
However, I want to learn how to analyze a site and figure out the way to deface it
,case in point
sscrmnl.edu.ph
All the other tuts teach you how to search in Google dorks for sites. I want to pick the site and find angles to approach after analyzing how to deface it. Any help will be much appreciated.
It's a .edu site, better keep off your hands before the feds knock at your door.
Pinoy ka rin ba? Pm me, we will discuss things in private. :)
DO NOT DEAL WITH THIS MEMBER
(Jun 1, 2015 06:57 AM)x4151rch Wrote: Pinoy ka rin ba? Pm me, we will discuss things in private. :)
Yeah, get some uneducated kid arrested. Cool. 😠
I wouldn't recommend defacing a .edu site, If you do you're going to have a bad time.
(Jun 1, 2015 09:12 AM)srry20wnu Wrote: Yeah, get some uneducated kid arrested. Cool. 😠
I'm also with you guys, I also don't recommend defacing (I have several shelled sites, on different servers,and none of them were defaced), especially on a .edu site 🙃. I just actually want to discuss some things with him as his target was the site of the school where I also attended 😉
I could help OP out by linking him to what he is looking for, but i won't.
Reason: i don't like the idea of random defacements.
I wish OP no good luck with this, Bye.
sscrmnl.edu.ph/?s=<try different xss vulnerability> Scan with acunetix for a list of known vulns.
(Jun 2, 2015 02:13 AM)Gee4rce Wrote: I could help OP out by linking him to what he is looking for, but i won't.
Reason: i don't like the idea of random defacements.
I wish OP no good luck with this, Bye.
Indeed. Why not try your new skills out on DVWA
(Jun 2, 2015 02:02 PM)R00t M4st3r Wrote: sscrmnl.edu.ph/?s=<try different xss vulnerability> Scan with acunetix for a list of known vulns.
wow, pls tech me ur ways mastur hecker
(Jun 2, 2015 02:02 PM)R00t M4st3r Wrote: sscrmnl.edu.ph/?s=<try different xss vulnerability> Scan with acunetix for a list of known vulns. every time acunetix is recommended another kitten commits suicide
(Jun 3, 2015 12:52 AM)Th3PonyWizard Wrote: every time acunetix is recommended another kitten commits suicide
Although I agree sometimes Acunetix is not the best vulnerability scanner out there. However, it does pick up a good majority of corrupt code. You also have to worry about Acunetix reporting false positives. However, Acunetix is a fairly good web scanner out there to gather information on a target. They have default presets, you may need to enter your own code.
.edu = jail time plus being monitored and logged for the rest of your life
(May 31, 2015 08:22 AM)mdt3ch Wrote: I have read about xss, rfi, fli, and sqli for website defacing.
However, I want to learn how to analyze a site and figure out the way to deface it
,case in point
sscrmnl.edu.ph
All the other tuts teach you how to search in Google dorks for sites. I want to pick the site and find angles to approach after analyzing how to deface it. Any help will be much appreciated.
Try some of these tools:
mediafire.com/folder/yb3fy22w4dvrr/Security_Tools
Site Admin Login:
sscrmnl.edu.ph/wp-login.php?redirect_to=http%3A%2F%2Fsscrmnl.edu.ph%2Fwp-admin%2F&reauth=1
(Jun 3, 2015 12:31 PM)R00t M4st3r Wrote: Although I agree sometimes Acunetix is not the best vulnerability scanner out there. However, it does pick up a good majority of corrupt code. You also have to worry about Acunetix reporting false positives. However, Acunetix is a fairly good web scanner out there to gather information on a target. They have default presets, you may need to enter your own code.
It also stands out like a clown in a synagogue in webserver logs. Its pretty much the best way to get the server admins attention aside from sending him an email saying "hai can i heck ur server pl0x"
|
![[Image: gXLLoG.gif]](https://#/gXLLoG.gif)
