I can't find the admin page of a site, can someone explain to me how to find it (I'm new to website hacking)
then if someone has free time can help me also with the "next steps xD"
DO NOT DEAL WITH THIS MEMBER
Aug 1, 2024 03:52 AM
(This post was last modified: Aug 1, 2024 03:52 AM by ⚡Rednix™.)
(Aug 1, 2024 03:43 AM)arav Wrote: I can't find the admin page of a site, can someone explain to me how to find it (I'm new to website hacking)
then if someone has free time can help me also with the "next steps xD"
You could try doing something like this, click here.
(Aug 1, 2024 03:52 AM)⚡Rednix™ Wrote: You could try doing something like this, click here.
I already tried, it doesn't work )-:
DO NOT DEAL WITH THIS MEMBER
Aug 1, 2024 04:21 AM
(This post was last modified: Aug 1, 2024 04:24 AM by ⚡Rednix™.)
(Aug 1, 2024 04:20 AM)arav Wrote: I already tried, it doesn't work )-:
In that case you have to use something more advanced. Look into Github, a lot of great scripts for that.
Try this one. Very easy to setup and use, and is up to date with a large database: https://github.com/mIcHyAmRaNe/okadminfinder
Aug 1, 2024 06:27 AM
(This post was last modified: Aug 1, 2024 06:28 AM by BiNBo.)
What you're looking to do is web fuzzing and discovery. To get started, you'll need to use one of many tools out there (GoBuster, FFUF, RustBuster, etc.) and see if you can find it that way. Sometimes it's not so straightforward, but that should at least get you started. As for a good wordlist, just look up SecLists from Daniel Miessler. There's some great ones to get started with there.
If a tool like dirbuster doesn't find an admin page, then the target may only be using a cPanel or is only using the server backend. You have a plan for getting a login?
(Aug 1, 2024 06:51 AM)DramaKing Wrote: If a tool like dirbuster doesn't find an admin page, then the target may only be using a cPanel or is only using the server backend. You have a plan for getting a login?
I managed to find the page in phpMyAdmin... only now I have no idea how to access it. any advice?
Aug 1, 2024 09:10 AM
(This post was last modified: Aug 1, 2024 09:10 AM by DramaKing.)
Start with learning PHP?
(Aug 1, 2024 07:36 AM)arav Wrote: I managed to find the page in phpMyAdmin... only now I have no idea how to access it. any advice?
(Aug 1, 2024 09:10 AM)DramaKing Wrote: Start with learning PHP?
I already know a minimum of it, but from knowing php to penetrating a site there's a lot of water involved.
(Aug 1, 2024 03:43 AM)arav Wrote: I can't find the admin page of a site, can someone explain to me how to find it (I'm new to website hacking)
then if someone has free time can help me also with the "next steps xD"
send the site
That shits easy , just use a google dork to find an admin login page
try this basic one: inurl /admin/login.aspx
there are countless dorks for this thing.
Aug 2, 2024 07:47 AM
(This post was last modified: Aug 4, 2024 07:56 AM by Bastille.)
hahaha[color=#2ECC40][/color
]
😎[video=dailymotion]vews[/video][img]dfwedw[/img]
wada 💯🙄🤣✌ [warn]
Assetfinder, dirsearch, etc. could also be a subdomain admin.domain.com. Or just use google, site:sitename "login" or site:sitename "admin". If its cPanel, have fun.
i have an admin panel finder from github that works pretty well for this. also its bad english makes it funny but hell of a tool and its a good addition to kali linux toolkit,
https://github.com/C4ssif3r/admin-panel-finder
|