Mar 26, 2017 04:49 AM
(This post was last modified: Mar 26, 2017 05:27 AM by R3cidis.)
Soo.. Hello everyone ✌
There is this one fellow member here who goes by the name of vignesh52. He's a newcomer here, and from the start all of his threads were in this sub-forum asking to "hack" a website Rahmathlabs.com. It's an old, inactive website with traces of Joomla and some unknown, poorly coded admin panel that only allows to edit/create news and upload/delete files to a directory /admin/downloads/.
From the tenor of this hackforums members` posts it seems like he's just some guy who knows merely anything about any type of intrusion/penetration of websites and their security. And it seems that he just wanted to see what is possible when you have admin credentials of a website. Maybe to do some harm, maybe just to fuck around inside of the admin panel.
So at first I gave him some information about getting the password of the super-admin at rahmathlabs.com. But I still hashed that password by md5 and base64 encryption so that he would atleast need to use his little brain to some extent.
Then I showed him that it is possible to upload any file through that admin panel and linked him to a simple example of a typical deface (/admin/downloads/filename.htm). But it seemed that he still wouldn't understand what I meant and what to do with that information that I gave.
So then I went a bit further, oploaded an old and simple webadmin script that was coded with PHP where you could navigate through the files of an individual website where that script was uploaded and showed him again what is possible, by renaming an original index file to something that went along the lines of "oldindex" or something like that and uploaded a new index file that was the same from a previous example of a deface and posted a reply "sorry my hands were itchy" to show him how it usually looks and what happens when an intruder harms the website and just left off..
A day or two passes and I see his post, where you could actually see that he has no fucking clue what is happening, what information was given to him and what the fuck happened to that website (that I guess had nothing in common with him). Later the example daface was changed to make me look like a skid, that I was just defacing that website (which was already defaced 5 times in three years) just for fun or to make myself look like some sort of an elite hacker..
Then some backlash came at me in this forum.. When I had no actual intensions to harm that site or do some bad to other members...
Then I found out that index file was removed from the website and there were no permissions of accessig the /admin/ directory and the website was left fucked up by the requester him self or other shits that just stumbled upon that thread and found the password (dehashed by some other HF member) and let their hands loose...
So I just wanted to apologise to anyone who was involved with vignesh52, me or that website..
I'm sorry for any misunderstandings that might have happenend and I don't want to be known just as "some random skid" on this forum. I want peace, I want to help others learn something and learn something new myself..
Again.. I apologise for what had happened and I hope everything will go well from now on..
Peace 😵
Oh and sorry for any grammar related mistakes. It is because english is not my native language.
