Monday, June 18, 2012

Hacking Websites


Hacking Websites


There are many ways to hack a website. Some are more efficient, some are just useless.
In this series, we are going to learn some tricks only for educational purpose. We believe that
when you start thinking the way an attacker thinks then you can find ways to escape from him.
Well, lets start the job!! Have fun.


If you posess the HTML & JAVA knowledge then you can even access password protected websites.


To hack a Password Protected Websites just follow these steps: -


* Open the website you want to hack. Provide wrong username-password.
(e.g : Username - me and Password - ' or 1=1 --)
An error occured saying wrong username-password. Now be prepared
ur work starts from here...


* Right click anywhere on that page =>> go to view source.


* There you can see the html codings with javascripts.


* There you find somewhat like this..




* Before this login information copy the url
of the site in which you are.(e.g : www. hack.com)




* Then delete the java script from the above that validates your
informaiton in the server.(Do this very carefully, your success to
hack the site depends upon this i.e how efficiently you delete the
Javascripts that validate ur account information)






then look for...code ..: input name="password" type="password"
=> replace
there instead of . See there if
maxlength of password is less than 11 then increase it to 11
(e.g : if then write


* Just go to file => save as and save it any where within
the hardisk with ext.html(e.g :c:hack.htm)


* Close your webpage and go to the webpage u save in your
harddisk(e.g : c:hack.htm) Open it.


* You see that some changes in current page as compared to original
One. Don't worry.


* Provide any username[e.g:hacker] and password[e.g:' or 1=1 --]


Congratulation!You have cracked the above website and entered into the
account of Ist user saved in the server's database.

Now you know how attackers can exploit HTML and JAVA. 
Thanks for reading us, please send us your comments.
Success is a Process!

No comments:

Post a Comment