+- Sinisterly (https://sinister.ly)
+-- Forum: Hacking (https://sinister.ly/Forum-Hacking)
+--- Forum: Tutorials (https://sinister.ly/Forum-Tutorials)
+--- Thread: Tutorial Targeting websites via searching and finding compressed files (/Thread-Tutorial-Targeting-websites-via-searching-and-finding-compressed-files)
Targeting websites via searching and finding compressed files - ElSyad - 04-25-2020
Hello world,
Today I'll share with you how to targeting websites via searching and finding compressed files that help you to get access
Sometimes many admins when install new script (webapp) on his website and forget to remove the compressed file
For example:
vBulletin, Wordpress, Joomla, Drupal, SMF, etc ...
# What I need?
DirBuster, Havij, Acunetix WVS, Linkrot, etc ...
Also you can use this online website
http://www.file2hd.com/
# The Method
You can use your mind to search for the files on the website, for example:
wordpress.zip, word.zip, wp.zip, vb.zip, forum.zip, www.zip, public_html.zip, joomla.zip, smf.zip, etc ...
Or you can use any tool we have mentioned above
DirBuster, Havij, Acunetix WVS, Linkrot, etc ...
# Tricks
After finding the compressed file and download it to your PC and extracting it
You should look to the script's configuration file
- If we find the (HostName), (DB_Host) are not on "localhost"
Then we can try to connecting to the database remotely
- Trying the password on script's admin panel (every script has a diffrent CP)
- Trying the password on website/server admin panel (cPanel, Plesk, DirectAdmin)
- Trying the password on admin's email
- Trying social engineering with the root server or the technical support
# Tutorial
Now let's see the video
I hope you like this tutorial
Regards,
elsyad/.
RE: Targeting websites via searching and finding compressed files - mothered - 04-25-2020
Along with Havij, Acunetix Is a very powerful tool, that should definitely be used In this tutorial.
Basically, this Is relying on the admin's neglect to delete the archive file containing the site's credentials.
Clever thinking to document this guide.
Well done.
RE: Targeting websites via searching and finding compressed files - ElSyad - 04-27-2020
(04-25-2020, 12:03 PM)mothered Wrote: Along with Havij, Acunetix Is a very powerful tool, that should definitely be used In this tutorial.
Basically, this Is relying on the admin's neglect to delete the archive file containing the site's credentials.
Clever thinking to document this guide.
Well done.
Thanks for your addition dude,
But I think DirBuster is too good in brute forceing directories/files
DirSearch is also good tool, DirHunt too
RE: Targeting websites via searching and finding compressed files - mothered - 04-28-2020
(04-27-2020, 08:20 PM)ElSyad Wrote: But I think DirBuster is too good in brute forceing directories/filesAbsolutely.
DirSearch is also good tool, DirHunt too
My post Is more so based on the power of Acunetix, and not suggesting to disregard the above tools.
RE: Targeting websites via searching and finding compressed files - Mr.Kurd - 04-28-2020
Hey my Bro,
ELSayad Al-Salam Alekum, Long time didn't see you active around and thank you for the useful contents as always.