[DuplexnNYC]

I want to access the backend of a site that is trying to sell some BS Defi token. I want to f with them. Any help out there?

[Nemo5]

You can perform vulnerability scanning using tools like Nessus, OpenVAS, or Burp Suite to identify any weaknesses or security flaws in the website's backend infrastructure. Look for common vulnerabilities such as SQL injection, directory traversal, or insecure file uploads.

Or you can attempt to gather additional information or access credentials through social engineering techniques. This could involve phishing attacks, pretexting, or impersonation to trick individuals with access to the backend into providing login credentials or other sensitive information.

[linkinpork]

I want to access the backend of a site that is trying to sell some BS Defi token. I want to f with them. Any help out there?

Hi,

1. Use something like Wappalyzer to find the CMS version.
   
2. You know the CMS now, so the admin login page should be predictable.
   
3. Use a CMS-specific scanner.
   

Drupal has this: https://github.com/SamJoan/droopescan
Wordpress has this: https://github.com/wpscanteam/wpscan
Joomla has this: https://github.com/OWASP/joomscan

Have fun!

[qwerty42]

I just tried Wappalyzer on a website that I know is Umbraco and it was wrong. It said it was Drupal CMS

[famedgod6]

you could use NMAP to scan for open ports and the versions of those ports and use something like searchsploit or exploit-db to find something you can exploit, then fire up metasploit framework and exploit it,


thats just one way, I know many other ways