RE: how to deface a website 03-17-2013, 02:14 PM
#11
My pleasure man 
![[Image: IRlys.png]](http://i.imgur.com/IRlys.png)
The stories and information posted here are artistic works of fiction and falsehood. Only a fool would take anything posted here as fact.
| how to deface a website filter_list | |
![[+]](https://sinister.ly/images/modern/collapse_collapsed.png)
RE: how to deface a website 03-31-2013, 08:31 AM
#12
dang.. now i would like to test my school website too XD
The statement below is true,
The statement above is false.
The statement above is false.
![[Image: icanseeyou1234.jpg]](http://www.danasoft.com/sig/icanseeyou1234.jpg)
I am The ONE Who Cannot Resolve R.A.T. Setting Since 2011!
RE: how to deface a website 03-31-2013, 08:31 AM
#13
dang.. now i would like to test my school website too XD
The statement below is true,
The statement above is false.
The statement above is false.
I am The ONE Who Cannot Resolve R.A.T. Setting Since 2011!
RE: how to deface a website 04-03-2013, 12:02 AM
#15
First of all if you are on this forum, i think you already have installed a linux distro on your system.
so here we go step by step :
1. Use port scanner tools like nmap, W3af, Nessus and many more. (These can also be used further not limited to port scanning)
2. Use Nikto to find vulnerabilities on a webserver.
3. Regarding your question about "How to find admin page" If the target website is nothing more than a simple HTML doc then you can find OS of the webserver using nmap (nmap -sV www.target.com) and try going to cpanel directly by puting port number next to URL in address bar like:
(my school's website is www.ngfssaket.com) - (In the address bar : http://www.ngfssaket.com:2082) you are lucky if it works else try using ADMIN FINDER Software. Most easy to use is HAVIJ (Google it and download).
you can use havij for SQL Injection if the website pattern goes like : www.target.com/anything.php?q=1234 can also be used if the website is in .asp or .aspx
4. About Nikto it is useful in case you are planning to a do a serious attack on your target. It can help you in finding various vulnerabilities including HTTP methods, CGI, Database etc.
5. you can also use NETCAT to do HTTP attacks
COMMAND (Post installation)
nc www.target.com [PORT] usually the port is 80 i.e., TCP
after that you write OPTIONS / HTTP/1.1
Though OPTIONS method is not counted as a vulnerability but it can help you in finding other lot of vulnerabilities. This is what makes OPTIONS method enabled on a webserver a dangerous thing.
Hope this helped you Good Luck
Don't do any black hat activities unless you feel comfortable with it.
so here we go step by step :
1. Use port scanner tools like nmap, W3af, Nessus and many more. (These can also be used further not limited to port scanning)
2. Use Nikto to find vulnerabilities on a webserver.
3. Regarding your question about "How to find admin page" If the target website is nothing more than a simple HTML doc then you can find OS of the webserver using nmap (nmap -sV www.target.com) and try going to cpanel directly by puting port number next to URL in address bar like:
(my school's website is www.ngfssaket.com) - (In the address bar : http://www.ngfssaket.com:2082) you are lucky if it works else try using ADMIN FINDER Software. Most easy to use is HAVIJ (Google it and download).
you can use havij for SQL Injection if the website pattern goes like : www.target.com/anything.php?q=1234 can also be used if the website is in .asp or .aspx
4. About Nikto it is useful in case you are planning to a do a serious attack on your target. It can help you in finding various vulnerabilities including HTTP methods, CGI, Database etc.
5. you can also use NETCAT to do HTTP attacks
COMMAND (Post installation)
nc www.target.com [PORT] usually the port is 80 i.e., TCP
after that you write OPTIONS / HTTP/1.1
Though OPTIONS method is not counted as a vulnerability but it can help you in finding other lot of vulnerabilities. This is what makes OPTIONS method enabled on a webserver a dangerous thing.
Hope this helped you
Good LuckDon't do any black hat activities unless you feel comfortable with it.
![[Image: cooltext980231940.gif]](http://s13.postimg.org/fpc42h0lj/cooltext980231940.gif)
RE: how to deface a website 04-03-2013, 02:05 PM
#16
man.. i have uploaded a shell to a website but i don't know how to access this shell i don't know its link in website.. please help me...
RE: how to deface a website 04-03-2013, 02:30 PM
#17
(04-03-2013, 02:05 PM)crazydude Wrote: man.. i have uploaded a shell to a website but i don't know how to access this shell i don't know its link in website.. please help me...
Use black widow to scan website and select download file while scanning this will show you all the files that are present on webserver, checkout the folders to make url out of this like
target.com > httpdocs > shell > shell.php
so the url will be www.target.com/shell/shell.php
It may help you in confirming whether the shell has been successfully uploaded or not.
RE: how to deface a website 04-11-2013, 05:23 PM
#18
a big thanks virusreloaded, i will practice it.
i will practice it.
RE: how to deface a website 05-16-2013, 07:18 PM
#19
I learned some new things from this thread, good luck to you OP.
RE: how to deface a website 05-16-2013, 07:18 PM
#20
I learned some new things from this thread, good luck to you OP.
Users browsing this thread:
