[boogasystem]

I want to learn how to hack login pages and login to accounts without the password, if you know how to please message me and teach me.

[Florin Salam]

It doesn't work like this. Put your hands on a book or a training course and learn how to do such thing. I recommend you to start with Certified Ethical Hacking courses.

[Yodawarrior2]

I want to learn how to hack login pages and login to accounts without the password, if you know how to please message me and teach me.

Seems like you want to learn a lot of things. Go read my previous reply.

[famedgod6]

I want to learn how to hack login pages and login to accounts without the password, if you know how to please message me and teach me.

If you find a SQL injection vulnerability, thats your best bet, use google dorks to find websites that could be vulnerable and try SqlMap or JSQL to automate the payloads

[⚡Rednix™]

If you find a SQL injection vulnerability, that's your best bet, use google dorks to find websites that could be vulnerable and try SqlMap or JSQL to automate the payloads

In good old days you could do that simply by injecting malicious SQL Code in login/pass to access :) Those were the days. You can read about it here: https://portswigger.net/support/using-sq...entication

You can do that still to this day, but very very rarely, if the target is using the old MySQL, and no sanitization of input.

[famedgod6]

In good old days you could do that simply by injecting malicious SQL Code in login/pass to access :) Those were the days. You can read about it here: https://portswigger.net/support/using-sq...entication

You can do that still to this day, but very very rarely, if the target is using the old MySQL, and no sanitization of input.

That gives me nostalgia in a weird way LOL, people used to manually be able to put in SQL injections in admin pages and it would be like magic,

one classic is the: OR '1=1--' payload

this was one of the many ways [censored] was able to hack so many company's with basic SQL injections, the 2011 version of Lapsus$, the techniques where simple but they caused a lot of damage

[w0rd]

I want to learn how to hack login pages and login to accounts without the password, if you know how to please message me and teach me.

Without the password?

I can think of two ways, though I'm sure there's more:

SQLi as mentioned above
Stolen session via XSS

If you're using burp and anywhere in the request/response headers/body/anything, look for "auth=" true, 1 admin something like that. Or user=[user].

You can either intercept the request and alter it there and then the response when it comes back.

Also with burp, if you find something (a parameter, header, whatever) that indicates if you're logged in and/or who you're logged in as (authentication vs authorization), you can try to use Burp's interception of requests/responses and add a match and replace rule, instead of doing it manually as I described above.

[shadowcrow]

I want to learn how to hack login pages and login to accounts without the password, if you know how to please message me and teach me.

Ususaly you look at the sourcecode make a lot of scanning first (subdomains, subfolders of the webspace and versions of the server(s)/webapps...) and from there you start depending on what you find.
This can be a backup-dump of the sql database of the site which you can crack, you find a vulnerability for one of the versions of the webapp-parts, dir/path traversal or advanced things like template injection or get/post manipulation uvm.
Sqlinjections and something in the code like "if pw == secretadminbypass then admin==1" are more a thing of the past or in academical scenarios like in hacking courses.
Somtimes it can also help to think out of the box and find the mailaddress of an admin or a user on that site and seek for a leaked password for another site and try that...

But if you want to learn this seriously you have to go through a lot of learning (and frustitation) on site like hackthebox or tryhackme...