Deface Help !

Teodor · Post by **Teodor** » 19 Jun 2007, 08:57

Well i've been hearing a lot of things about site defaceing ! Well can anyone help me to learn ? What exactly does a person need to deface a website?(besides knowledge

) ?

Help appreciated !

Cheers

RNA · Post by **RNA** » 21 Jun 2007, 23:28

Teodor wrote:Well i've been hearing a lot of things about site defaceing ! Well can anyone help me to learn ? What exactly does a person need to deface a website?(besides knowledge ) ?

Help appreciated !

Cheers

Well, to be able to defeace you need access.

So you'd have to know about exploits, vulerabilities and what nots.

Though I must say defacing isn't a good use of the gained knowledge, its your ethics that matter

Lyecdevf · Post by **Lyecdevf** » 21 Jun 2007, 23:34

Usually you would want to deface a PHP website. They are easier to get admin acess than most others and I have even seen tols to help you do it although I have never tried wether they really work.

Teodor · Post by **Teodor** » 22 Jun 2007, 04:07

what program should i use for scanning?

Something simple to understand.... I know about acunetix, but i've heard talking about nmap

!

So.....

Lyecdevf · Post by **Lyecdevf** » 22 Jun 2007, 05:43

Nmap is a port scanner. It shows you all the open ports at a given webserver. It is open source of course and is the most popular port scanner around as it is arguablly the best.

Nessus is a good vulnerabiliy scanner. It is still open source. You just have to fill out some stuff before you are allowed to download.

Post by **Big-E** » 22 Jun 2007, 07:09

Please explain to me why you would want to deface a website? Other than child pornography sites, I would have no need to deface any website regardless of what information is portrayed on it. Even if I don't agree with it, I am a huge supporter of free speach and a free internet. If people have the abilities and no morals as to deface websites, well it's not quite a free internet, is it?

Post by **bad_brain** » 22 Jun 2007, 07:14

keep away from vulnerability scanners.....they light up the logs like a christmas tree...and I don't know one that is really good anyway (too much false positives)..

nessus IS a good scanner, BUT you can't scan a random host with it! the "scanner" is just a client that connects to nessusd (the nessus daemon) on the host and nessusd is doing the actual scans, no nessusd on the host = no scan...

php sites are mostly attacked with remote file inclusions (rfi), check here for more info:
http://en.wikipedia.org/wiki/Remote_File_Inclusion

big-e: I agree with you, but well....if we are honest that was the stuff we were interested in as beginners too, right?

it's ok to give some general info, but of course we will never support such activities by giving something like a step-by-step guide....

Lyecdevf · Post by **Lyecdevf** » 29 Jun 2007, 14:35

Big-E wrote:Please explain to me why you would want to deface a website?

By the time a person actually learns to deface a website starting from stratch he or she will spend countless of hours asking him self or her self wether it is actually worth it. I guess if you spend countless of unslept night pondering on how to deface a web site it is up to you to make that call.

Post by **alien100** » 29 Jun 2007, 15:26

i think we should make a tutorial on this!

Nerdz · Post by **Nerdz** » 29 Jun 2007, 22:42

bad_brain wrote: big-e: I agree with you, but well....if we are honest that was the stuff we were interested in as beginners too, right? it's ok to give some general info, but of course we will never support such activities by giving something like a step-by-step guide....

Don't think so Alien...

mo2332 · Post by **mo2332** » 30 Jun 2007, 08:52

there is no reason to mess up a site for every 1 mabye hack in to i t and fuck with the admin but thats it

kill3r · Post by **kill3r** » 01 Jul 2007, 07:40

alien100 wrote:i think we should make a tutorial on this!

I agree

Post by **alien100** » 01 Jul 2007, 07:45

kill3r wrote:
alien100 wrote:i think we should make a tutorial on this!
I agree

its just because people keep asking and asking the same thing over and over agian

visser · Post by **visser** » 01 Jul 2007, 19:49

will anybody or any group of people volunteer to write a tut on this subject. that would be pretty cool!!!!!!!!! and help us all out

bubzuru · Post by **bubzuru** » 01 Jul 2007, 22:01

iv got a couple ov tuts on RFI and sql injection ill send you them if u want

suck-o.com

Deface Help !

Deface Help !

Re: Deface Help !