Own a webpage !!

[david zaragoza2]

well i m interested in making a website owned ..

n put my say:

U GOT OWNED BY DAVID ZARAGOZA!!....



pls assist me..??? ..

[Sethioz]

extamil site ?
depends what site it is, think you can put the details here too. here's some steps you can take:

1. check what this site is (does it run forum, or some website system, like phpnuke, e107..etc)
2. now you can start googling for exploits (its easy way) or visit site's like milw0rm.com
3. you can start testing those exploits on site.
4. a simple cookie editor can do miracles sometimes (you steal admin's cookie and then you can use it to fuck up site/forum)
5. you can try to scam out admin's password. in case he/she uses hotmail, yahoo..etc, you can try to upload fake login page and then send spoofed mail to admin so he/she would use your fake page to login, so you get password (usually they use same pass everywhere)
6. more complex way, is to find some exploits on your own, with some vulnerability scanners for example.

those are just basic steps. never start from end. always try most easy ways first.

[david zaragoza2]

this is the ip address : 202.75.56.164

web url:
http://www.extamil.com/website/news.php

web's chat url:
http://www.extamil.com/website/chat/index.htm

....i wil get my revenge ... ..

[david zaragoza2]

tat milwOrm site was good ..but i just dnt know which exploits to use..

abt tat 5th step,how to create n send a spoofed login for the admin ...the admin is using hotmail ...

[Sethioz]

seems like e107, but im not sure. if its e107, then its quite hard. e107 system is quite protected and not many exploits out there.

chatroom is very vulnerable indeed. I have made quite few hacks myself. for example you can get partial admin rights it is enought to ban others or use some other moderator/admin commands. you can also DOS the chatroom using Luigi's tool "flashchatz".
flashchatz is available on his site at aluigi.org under fake players bug

HERE is topic about the flashroom exploits i have either discovered myself or found on internet. as i have mentioned in that topic, it is possible to use flashchatz to crack passwords too. you cant bruteforce passwords on site, because it will most likely lock it out after 3-10 tries, but you can bruteforce passwords in flashchat using flashchatz.

[david zaragoza2]

so then how to make a spoofed email ..?

[Sethioz]

oh well. you gotta start from fake page. i belive its been discussed here before, but anyways:
first go to gmail, hotmail..etc (depends what fake page you want). go to login page ofcourse, then "save page as..." save whole webpage.
check if it opens whole page locally (drag it into browser). Now you can start modifying it. you need some knownledge about html and php to do so.
I used formmail for it, but you can plant a keylogger or anything else too.

In page's code where it shows the login and password field, into code you have to insert a formmail code so it will send you the login:pass when this fake page is used. you can google for formmail, but you still have to set it up and put into fake page.

then next step is to host that page to some hosting. like fateback.com, netsons.org..etc. just google for free hosting that allows scripts to be run (fateback wont work in that case). so you upload it to subdomain like:
login.live.netsons.org/user_login_blasdfklasfjkldas.php
make it look as real as possible.

now you need to send a spoofed mail. you can either google for email spoofer or for "how to spoof email" "how to send spoofed email" ..etc. cant bother to search myself right now, but its easy. even some mail programs allow it, but it may go into spam, instead of inbox.
you can also make an email to look like its their staff. something like [email protected].
then you finally send an email, something that is explaining why he should use this link to login.
you just make something up, something like that they need to verify the account duo the hotmail server update or crash..blabla. and then say that : to do so, please use the following link to login and verify your account (put the fake page link there). ppl usually dont notice this freehosting in it. if it begins like "login.live..." then its hard to say if its fake or not, because most ppl dont look at full link, links are LOOOONG. check the hotmail login page, look how long the link is.

[shadowslash657]

Your right, but on some profiles, this happend to me on chatango, you can acutaly tell becuase it dident fit the whole page, i have add block plus installed so i just right clicked and blocked it. Though if its an acutal web page by its self doing this you wont be able to tell unless you look at the link i guess, or scroll though the view source..which may not even show up. just alittle pointer so this dosent happen to you lol (that and since this section looks dead no one will see me looking stupid and rambleing) but also you could just get a few more apps for firefox that shows you. it wont exactly help in makeing the site but it will help in showing if its there. really ppl can get screwed over, heck there is even a java code that allows you to edit a page's look, which is how some can make it look like they paied for something on a site, such as ebay or something. thats why you shouldent trust screen shots lol.

[Sethioz]

well i never reply to those emails, because ebay, paypal, hotmail ...etc never send you such things. well they do, but they most definetly will not disable or cancel your account if you do not reply. it might be suspended temporarly, but highly unlikely.

yes you can change look of site with firebug, ive been using firebug to tweak and design my website. first i make changes in firebug and if i like it, then i change the page itself in server.

[shadowslash657]

ah, eh. i need to get firebug myself but im too lazy right now lol, and yeah, i dont even click any emails in my email adress, i dont even use it lol, just to sign up, event hen i use a random email genarator, nother firefox app, makes a random email then sends what ever you used it for to yoru real email, but it only lasts 12 hours, kinda good for killing flashchats on froums since you can just make accs over and over lol

[Sethioz]

Offtopic ppl, it was about hacking/owning a webpage, but yes i use "tempomail" addon for firefox too for registering on "unsafe" sites. tempomail has more options, 4h up to 1month.

[shadowslash657]

sorry sorry, and oh. might use that r.r anyways, i get off topic alot. sorry.(ends covo here, dosent see what else i could say)