+- Sinisterly (https://sinister.ly)
+-- Forum: Hacking (https://sinister.ly/Forum-Hacking)
+--- Forum: Website & Server Hacking (https://sinister.ly/Forum-Website-Server-Hacking)
+--- Thread: how to deface a website (/Thread-how-to-deface-a-website)
RE: how to deface a website - LiXon - 03-17-2013
My pleasure man
RE: how to deface a website - saddevil16 - 03-31-2013
dang.. now i would like to test my school website too XD
RE: how to deface a website - saddevil16 - 03-31-2013
dang.. now i would like to test my school website too XD
RE: how to deface a website - Dark Legion - 04-02-2013
hahaha go.
)
RE: how to deface a website - virusreloaded - 04-03-2013
First of all if you are on this forum, i think you already have installed a linux distro on your system.
so here we go step by step :
1. Use port scanner tools like nmap, W3af, Nessus and many more. (These can also be used further not limited to port scanning)
2. Use Nikto to find vulnerabilities on a webserver.
3. Regarding your question about "How to find admin page" If the target website is nothing more than a simple HTML doc then you can find OS of the webserver using nmap (nmap -sV www.target.com) and try going to cpanel directly by puting port number next to URL in address bar like:
(my school's website is www.ngfssaket.com) - (In the address bar : http://www.ngfssaket.com:2082) you are lucky if it works else try using ADMIN FINDER Software. Most easy to use is HAVIJ (Google it and download).
you can use havij for SQL Injection if the website pattern goes like : www.target.com/anything.php?q=1234 can also be used if the website is in .asp or .aspx
4. About Nikto it is useful in case you are planning to a do a serious attack on your target. It can help you in finding various vulnerabilities including HTTP methods, CGI, Database etc.
5. you can also use NETCAT to do HTTP attacks
COMMAND (Post installation)
nc www.target.com [PORT] usually the port is 80 i.e., TCP
after that you write OPTIONS / HTTP/1.1
Though OPTIONS method is not counted as a vulnerability but it can help you in finding other lot of vulnerabilities. This is what makes OPTIONS method enabled on a webserver a dangerous thing.
Hope this helped you
Good LuckDon't do any black hat activities unless you feel comfortable with it.
RE: how to deface a website - crazydude - 04-03-2013
man.. i have uploaded a shell to a website but i don't know how to access this shell i don't know its link in website.. please help me...
RE: how to deface a website - virusreloaded - 04-03-2013
(04-03-2013, 02:05 PM)crazydude Wrote: man.. i have uploaded a shell to a website but i don't know how to access this shell i don't know its link in website.. please help me...
Use black widow to scan website and select download file while scanning this will show you all the files that are present on webserver, checkout the folders to make url out of this like
target.com > httpdocs > shell > shell.php
so the url will be www.target.com/shell/shell.php
It may help you in confirming whether the shell has been successfully uploaded or not.
RE: how to deface a website - Dark Legion - 04-11-2013
a big thanks virusreloaded,
i will practice it.
RE: how to deface a website - NightFox109 - 05-16-2013
I learned some new things from this thread, good luck to you OP.
RE: how to deface a website - NightFox109 - 05-16-2013
I learned some new things from this thread, good luck to you OP.