[Crypt]

Ah, then I guess I misunderstood. Sorry man.

No worries

[xornull]

And what, in your opinions, would be one of the more advanced techniques, a friend of mine said something like self modifying shellcode or some weird thing like that

[Eclipse]

You can, but that's not hacking the website itself. He's talking about hacking a website directly. Not getting server access somehow then doing something to the website with full authentication.

Yes, but since the OP is slightly uneducated in this field, it's safe to say that he's not pissed off about someone including attacking a website's server as a method.

[Crypt]

Yes, but since the OP is slightly uneducated in this field, it's safe to say that he's not pissed off about someone including attacking a website's server as a method.

Who said he was pissed off? I was educating tortilla that the hacking the website and the server aren't the same thing, and that OP wanted website hacking techniques. Since it's pretty damn clear that that's what he asked for.

---

And what, in your opinions, would be one of the more advanced techniques, a friend of mine said something like self modifying shellcode or some weird thing like that

Doesn't that have something to do with exploit kits?

There are a lot of SQLi methods that are complex. There's more than just union based, which can also be advanced, if you know how to use it.

[Eclipse]

Who said he was pissed off? I was educating tortilla that the hacking the website and the server aren't the same thing, and that OP wanted website hacking techniques. Since it's pretty damn clear that that's what he asked for.

I never said he's pissed off... Please re-read my post. The OP asked 'how are websites hacked?'. Now, no offence to the OP, but that's a noob question. He's not talking about specifics, just the different ways in which a site can be compromised, attacking its server being one of them.

[Crypt]

I never said he's pissed off... Please re-read my post. The OP asked 'how are websites hacked?'. Now, no offence to the OP, but that's a noob question. He's not talking about specifics, just the different ways in which a site can be compromised, attacking its server being one of them.

You are an idiot. Go away.

[Alan Turing]

I never said he's pissed off... Please re-read my post. The OP asked 'how are websites hacked?'. Now, no offence to the OP, but that's a noob question. He's not talking about specifics, just the different ways in which a site can be compromised, attacking its server being one of them.

who cares if it's a noob question

[Dyme]

Well there are multiple ways.

Human Error
Admin Stupidity
Incorrectly configured software
SQLi (Union Based, Error Based and Time Based)
XSS [Cross Site Scripting] (Persistent, Reflective and DOM-based)
CSRF {aka XSRF} [Cross Site Request Forgery]
LFI [Local File Inclusion]
RFI [Remote File Inclusion]
RCE [Remote Code Execution]
Arbitrary Code Execution
XPATH Injection
Local File Disclosure
Full Path Disclosure

Full path disclosure is my fav way to hack sites tbh. To simplify your answer for the OP, hackers often exploit vulnerabilities in a website's web application because of an error made by the programmer (compared to the lang itself). There are many more ways that a websites server can be compromised of course, but exploiting the web application is the most common method if we're talking about attacks on port 80 alone.

Insert link to OWASP and done.

Just remember that there always has to be a vulnerability in something, whether that be the admin's stupidity, the web application, or the DNS service.

[Adorapuff]

Finding your own exploits is actually much simpler than most people think. It doesn't mean you'll find an 0day in mybb.
For example, here's a shitty tut I posted to HF at 2 am:
http://pastebin.com/raw.php?i=9abRFEWn
I couldn't post on SL as it was bothering cloudflare.

[Dyme]

Finding your own exploits is actually much simpler than most people think. It doesn't mean you'll find an 0day in mybb.
For example, here's a shitty tut I posted to HF at 2 am:
http://pastebin.com/raw.php?i=9abRFEWn
I couldn't post on SL as it was bothering cloudflare.

Code:

Sample shitty sanitation: if 'http' not in url: url = 'http://%s' % url

I'm not so sure that this is 'shitty sanitation' as it is an attempt to mitigate errors while attempting to retrieve a url. For example:

Code:

urllib2.urlopen('www.sinister.ly') #Throws a ValueError urllib2.urlopen('http://www.sinister.ly') #Correctly retrieves url

Therefore the conditional here was most likely not intended as a security measure. However, your concept still holds and your input still successfully satisfies the check while also reading the desired file. I'm sure if the developer was aware of this issue and actually wanted to implement some sort of sanitation, he would be smart enough to just to disallow the file URL scheme instead of just giving the go ahead for http.