+- Sinisterly (https://sinister.li)
+-- Forum: Hacking (https://sinister.li/Forum-Hacking)
+--- Forum: Website & Server Hacking (https://sinister.li/Forum-Website-Server-Hacking)
+--- Thread: A lil help plzz! (/Thread-A-lil-help-plzz)
A lil help plzz! - Asuna_mybb_import7736 - 02-26-2012
Hey!
I was thinking about something.
Can you make a normally site into a vulnerable site??
Sorry if its a stupid question...
RE: A lil help plzz! - Reverence - 02-26-2012
You mean like.. Make Google suddenly have a SQL vulnerability? No.
SQL vulnerabilities are caused when user input is poorly typed or if user input is incorrectly filtered in SQL statements.
RE: A lil help plzz! - 1llusion - 02-26-2012
If you have access to it then yes.
For example, if I add MyCode to HC, I have to run various tests to make sure, that nobody can exploit the MyCode in some way (making HC vuln to XSS or w/e).
RE: A lil help plzz! - Asuna_mybb_import7736 - 02-27-2012
So if i find a way to hack it, i can make it vulnerable??
RE: A lil help plzz! - 1234hotmaster - 02-27-2012
(02-27-2012, 10:16 AM)drake8 Wrote: So if i find a way to hack it, i can make it vulnerable??
you need a vuln site to hack not to hack a site to make it vuln
RE: A lil help plzz! - W0rM - 02-27-2012
(02-27-2012, 10:52 AM)1234hotmaster Wrote:(02-27-2012, 10:16 AM)drake8 Wrote: So if i find a way to hack it, i can make it vulnerable??
you need a vuln site to hack not to hack a site to make it vuln
Hahaha... I bet you confused the lil fella!
RE: A lil help plzz! - 1llusion - 02-27-2012
(02-27-2012, 10:16 AM)drake8 Wrote: So if i find a way to hack it, i can make it vulnerable??
In theory yes.
RE: A lil help plzz! - Frooxius - 02-27-2012
You don't make someone else's site vulnerable. You find an existing vulnerability that is already there, in order to gain access to it. However, once you have access to it, you can of course add more vulnerabilities if you want, by adding some additional code that can be exploited, or more likely, that's even directly made so it will allow for example execution of arbitrary code sent to the server. If you're the author of some website, you can of course make it vulnerable, though people who usually make websites and posses certain level of sanity usually take the exactly opposite approach.
Though... theoretically you might use some social engineering in order to expose some vulnerability that wasn't there, by making administrator/user do some change to it, although I don't know how much would you succeed with that, as users usually have restricted rights and administrator most probably wouldn't do anything that would seem suspicious/vulnerable to him, unless it was a very peculiar case... if he would even be willing to make changes based on someone's request.
RE: A lil help plzz! - Asuna_mybb_import7736 - 02-28-2012
Thanks Froox!!
And thanks to you others!
It was a great help
RE: A lil help plzz! - TheBeanhacker - 04-04-2012
but whats the point of adding more vulnerabilities to the site if you have already hacked into it??