[Asuna_mybb_import7736]

Hey!
I was thinking about something.
Can you make a normally site into a vulnerable site??
Sorry if its a stupid question...

[Reverence]

You mean like.. Make Google suddenly have a SQL vulnerability? No.

SQL vulnerabilities are caused when user input is poorly typed or if user input is incorrectly filtered in SQL statements.

[1llusion]

If you have access to it then yes.
For example, if I add MyCode to HC, I have to run various tests to make sure, that nobody can exploit the MyCode in some way (making HC vuln to XSS or w/e).

[Asuna_mybb_import7736]

So if i find a way to hack it, i can make it vulnerable??

[1234hotmaster]

So if i find a way to hack it, i can make it vulnerable??

you need a vuln site to hack not to hack a site to make it vuln

[W0rM]

So if i find a way to hack it, i can make it vulnerable??

you need a vuln site to hack not to hack a site to make it vuln

Hahaha... I bet you confused the lil fella!

[1llusion]

So if i find a way to hack it, i can make it vulnerable??

In theory yes.

[Frooxius]

You don't make someone else's site vulnerable. You find an existing vulnerability that is already there, in order to gain access to it. However, once you have access to it, you can of course add more vulnerabilities if you want, by adding some additional code that can be exploited, or more likely, that's even directly made so it will allow for example execution of arbitrary code sent to the server. If you're the author of some website, you can of course make it vulnerable, though people who usually make websites and posses certain level of sanity usually take the exactly opposite approach.

Though... theoretically you might use some social engineering in order to expose some vulnerability that wasn't there, by making administrator/user do some change to it, although I don't know how much would you succeed with that, as users usually have restricted rights and administrator most probably wouldn't do anything that would seem suspicious/vulnerable to him, unless it was a very peculiar case... if he would even be willing to make changes based on someone's request.

[Asuna_mybb_import7736]

Thanks Froox!!
And thanks to you others!
It was a great help

[TheBeanhacker]

but whats the point of adding more vulnerabilities to the site if you have already hacked into it??