Hey Guys, Just to get a couple of things straight, im not a complete noob when it comes to hacking ect. But I do need help sometimes.
I was recently into searching up how to attack/hack websites. Like sql injections, xss and stuff like that. So i went on a website to try it out and found the website wasn't vulnerable to any of these methods. But I'm pretty sure it's very insecure. I scanned the website using vega v1.0 (Kali linux) and it said it had heaps of stuff (but could be also false-positives, but the problem is i don't know if they are and need to try them out but don't know how to) which include,
.Cleartext Password over http (The site is also using http, not https which might come in handy while sniffing for passwords and stuff, but people would rarely login to the site)
.Cross-Site Script Include (Pretty sure that means the site is vulnerable to xss)
.Possible Social Security Number Detected (Not needed)
.Possible SQL-Injection (Think this is a false-positive)
and many more in the High Risk section. Im wondering how would I use these vulnerabilities if they aren't false-positives, and if you manage to hack/gain control of this website, please let me know how. I was just wondering are there any ways of hijacking, dns spoofing, or hacking the website for me to display a particular html line of code. I'm simply trying to do this attack to learn more about hacking and attacks in general & also to gain an understanding on scanning then exploiting a particular vulnerability.
It would be awesome for someone to respond with some feedback or help on how to actually do this attack on the site.
Also, if you think I am doing things wrong like using vega or something, let me know, and tell me how you guys do stuff :D
Quick Vega Scan (Not a full scan of it, there are a lot more vuleranbilties): prntscr.com/7wqugk
Website trying to gain access to: cccgympie.qld.edu.au
Email me: [email protected]
Skype: exodian_exodus
the first rule above all with scanners if you ARE going to use them is to know what the hell you're scanning FOR
read Web Application Hacker's Handbook, 2nd Edition is an amazing book you want to read to know your shit about web app sec.
or google for tutorials
I just wanted to know how I would actually do these sorts of attacks ect. The scanning part was to give people an idea of the website i'm looking at to explain what this website could potentially be vulnerable to and to hack. It doesn't matter if i do or don't know what im scanning for, im scanning for vulnerabilities and thats all I need to know. I was just wondering if anyone could actually get into or show me how to find these vulnerabilities and how to get into this certain website.
If the scan shows it has vulnerabilities, google the vulnerability. Thats the best way
Yes I know that, but i was wondering if they were false-positives and if the site was actually vulnerable to them. Because vega shows for example "this site has 32 vulnerabilities of cross-site scripting" or whatever, and i search up how to xss and you need a text box to like enter javascript ect when the website doesn't have one. So how can I xss? I can't can I?
Web Application Hacker's Handbook, 2nd Edition
that is all
Lel, Ok, I hate reading books, but love reading information! Sucks but good at the same time. Hacking Requires time, which I get unlike some script kiddies who just want a quick short answer xD
you hate reading books but love reading information
books ARE information
Sorry I put that the wrong way, I meant to say that I hate reading fictional books, like stories and stuff, but love reading information. Lel soz
This is a christian college ffs. Respect their religion and its a school website.
Dude, that site was just an example, because i am at the school. Im am a christian and wanted to learn the skills to do it. You can take my word for it but I am a white hat hacker. Planning to get a CEH when I leave this school. So I am just curious to see was kind of holes the school has and stuff, and how I would get about doing that. Like I said I scanned using VEGA in kali linux and it said it has heaps of vulnerabilities that could be exploitable. It's just that I wanna know how I would go about figuring out how to exploit these. Information = Power. I do respect their religion/my religion.
I have just always wanted to know. Because shitty Youtube Videos don't actually show you real life targets, all they do is find vulnerable SQL injection websites. They usually don't show you how to find an vulnerabilities, test if it's a false-positive, then exploit it if it's not. Hopefully you get what Im saying and Im not trying to bring any harm to anyone, that website was just an example.
(Jul 28, 2015 06:31 PM)Exodian Wrote: Dude, that site was just an example, because i am at the school. Im am a christian and wanted to learn the skills to do it. You can take my word for it but I am a white hat hacker. Planning to get a CEH when I leave this school. So I am just curious to see was kind of holes the school has and stuff, and how I would get about doing that. Like I said I scanned using VEGA in kali linux and it said it has heaps of vulnerabilities that could be exploitable. It's just that I wanna know how I would go about figuring out how to exploit these. Information = Power. I do respect their religion/my religion.
I have just always wanted to know. Because shitty Youtube Videos don't actually show you real life targets, all they do is find vulnerable SQL injection websites. They usually don't show you how to find an vulnerabilities, test if it's a false-positive, then exploit it if it's not. Hopefully you get what Im saying and Im not trying to bring any harm to anyone, that website was just an example.
White hats dont exploit their own school....
Quote:then exploit it if it's not
It's no illegal in any way, shape or form to find exploits and report them to the school. It only become illegal if u gain further access to things such as personal information and stuff using the exploit. The reason is because I don't wanna scan all these vulnerabilities and see they are false-positives. You should see what im saying here. Thats exactly what ethical hacking is, Im in Australia by the way so law might be different from where u r from. :P But from what I have read, finding an exploit and confirming it works to gain access to whatever, isn't illegal at all. Unless u actually use that to gain access.
If you still do not agree with me I would love to know your definition of what a white hat hacker/ethical hacker [Qualified] would do to find any vulnerabilities for a school website.
Im not here to argue, even if I was doing this for illegal purposes (which im clearly not) it wouldn't matter because people tell others how to do illegal shit on hf all the time xD. Im simply wanting to learn how to do things to help further security and to get a better understanding of black hats (Pretty much the main purpose of an Ethical Hacker)
Jul 28, 2015 07:41 PM
(This post was last modified: Jul 28, 2015 07:42 PM by PhantomElite.)
(Jul 28, 2015 07:27 PM)Exodian Wrote: It's no illegal in any way, shape or form to find exploits and report them to the school. It only become illegal if u gain further access to things such as personal information and stuff using the exploit. The reason is because I don't wanna scan all these vulnerabilities and see they are false-positives. You should see what im saying here. Thats exactly what ethical hacking is, Im in Australia by the way so law might be different from where u r from. :P But from what I have read, finding an exploit and confirming it works to gain access to whatever, isn't illegal at all. Unless u actually use that to gain access.
If you still do not agree with me I would love to know your definition of what a white hat hacker/ethical hacker [Qualified] would do to find any vulnerabilities for a school website.
Im not here to argue, even if I was doing this for illegal purposes (which im clearly not) it wouldn't matter because people tell others how to do illegal shit on hf all the time xD. Im simply wanting to learn how to do things to help further security and to get a better understanding of black hats (Pretty much the main purpose of an Ethical Hacker)
Speaking from a US perspective here.
Exploiting is most certainly illegal. It's not just if you access personal information or anything. Hell, companies even tried to pursue people for port scans (which, by the way, are 100% legal).
If you gain access you have committed a felony, if not multiple ones.
EXTREMELY GRACIOUS companies like Microsoft have been so merciful! They promised not to prosecute people for reporting vulnerabilities.
Fuck, it might even be illegal for you to enter 1' lol. Don't get it twisted.
(Jul 28, 2015 07:27 PM)Exodian Wrote: It's no illegal in any way, shape or form to find exploits and report them to the school. It only become illegal if u gain further access to things such as personal information and stuff using the exploit. The reason is because I don't wanna scan all these vulnerabilities and see they are false-positives. You should see what im saying here. Thats exactly what ethical hacking is, Im in Australia by the way so law might be different from where u r from. :P But from what I have read, finding an exploit and confirming it works to gain access to whatever, isn't illegal at all. Unless u actually use that to gain access.
If you still do not agree with me I would love to know your definition of what a white hat hacker/ethical hacker [Qualified] would do to find any vulnerabilities for a school website.
Im not here to argue, even if I was doing this for illegal purposes (which im clearly not) it wouldn't matter because people tell others how to do illegal shit on hf all the time xD. Im simply wanting to learn how to do things to help further security and to get a better understanding of black hats (Pretty much the main purpose of an Ethical Hacker)
Unless you're a hired pentesting forensics who is purposely searching for holes in there security then no it's legal by all means. But if you're some random guy on a computer saying "HEY ima hack this site just to see if I can" and if you're detected by a IDS or a firewall in general then of course you're going to be reported or in short "illegaly" attempting to get into the site.
Also Black hats =/= Ethical hackers. Ethical hackers only need to know the information black hackers know just so they can more easily reverse engineer the damage done because if you know how something works. You can easily break it down and remove it.
|
