ROWAREZ
rowarez hacking forum
Lista Forumurilor Pe Tematici
ROWAREZ | Reguli | Inregistrare | Login

POZE ROWAREZ

Nu sunteti logat.
Nou pe simpatie:
LaraTaner pe Simpatie.ro
Femeie
24 ani
Prahova
cauta Barbat
24 - 52 ani
ROWAREZ / Tutoriale / Hacking frontpage enabled sites Moderat de mod
Autor
Mesaj Pagini: 1
Zaishen
Resident Elite

Inregistrat: acum 14 ani
Postari: 449
Well in this tutorial, I will teach you extra easy and kewl ways to hack
frontpage enabled websites, not only that I will taech you how to get the
frontpage passwords from the websites, and all that


Best view: pico in Linux

Finding Victim:

Read below, you will be able to get the idea.


Getting the Files or Hacking directly:



1. The Frontpage 98 have world writeable /_vti_pvt
SO, anyone can write and delete files.

2. The other Frontpage versions have:

Code:

a)_vti.inf.html

This will give you the path and version of the server's Frontpage.




3. The _vti_pvt is a directory.
It will mostly provide you the log texts.





4. Passwords of the Frontpage:

Code:

/_vti_pvt/administrator.pwd
/_vti_pvt/users.pwd (OR, if that fails, try user.pwd)
/_vti_pvt/group.pwd (May exist)
/_vti_pvt/service.pwd (sometimes but it's mostly installed in unix thingy)

4a) To crack the password:
Obtain John the ripper copy or one my of favourite Cracker jack, but these
two are difficult, so try the Hackers view v.1.0 for GUI and easy use.




5. Hacking the Frontpage.
Get your frontpage and try to connect to any website from it, the one
which you obtained the password and cracked the password, so it will ask
for a password, enter user/pass and you will be able to hack it, in no
time.

The password file will look like:

Code:

username:password

It's DES encryption.




6. Obtaining the password from Frontpage:
queryhit.html, it will be on most of the servers, enter that and and type:
Filesearch=*.pwd, it will give you the passwords most of the time.


7. Getting the other gold of Frontpage:

Code:

_vti_bin,
_vti_pvt,
/shtml.exe/_vti_rpc

OR

Code:

/_vti_rpc

/shtml.dll
/administrator.dll
/users.dll

OR

Code:

/user.dll

As .dll bug you already read in previous article at Astalavista, so I will
not describe how to hack them.


pus acum 14 ani
   
Pagini: 1  

Mergi la