As we had already discussed some website hacking techniques and soon I will post some more articles on website hacking topic. But before posting such article i wants to clear some basic problems of readers related to website hacking.
In the past few days, I've seen a lot of people having troubles and get stuck at a certain point while they hack. But, some readers were just not able to get out their problems. So in this article, i am going to answere these most of the problems/questions and hopefully you'll find this article useful
I was just going through comments made by you guys and noticed some readers left unanswered or they were not convinced by me. So, here are answers to some of commonly asked questions about Website hacking.
You might be interested in some of our other articles:
Q : What is a shell when it comes to web hacking?
Answer : Well, basically a shell is a type of .php file needed to be uploaded on a hacked website or a host in order to make it work. The way is works is not that complex if you wonder. With a shell uploaded to your hacked website or host, you can alter almost anything using it.While you're using a shell, you will be able to:
Q: What does defacing mean and what's a deface page?
Answer : Defacing, in most certain cases, means that you wanna upload a specific file of yours,mostly a message to prove the administrator that you hacked the website. If you think about it, it's relatively similar to a deface page. A deface page, while hacking a website, is simply a message to convey to the owner of the website that you've owned their security.
Most people do this for fun, fame, or other stuff that can satisfy your hacking skills. If you're a beginner in web hacking, defacing a site will be considered as a big success for you just like me :)
Question : A common difference between a shelled website and a defaced website?
Answer : Simply answering, a shelled website can be used as hosting for illegal operations, can be used for DDoSing and other functions a shell can perform, while a defaced website is simply a type of message, mostly threatening and fun which conveys the owner of the website that their security is low and that you owned them.
Question : My IP was logged while I was hacking, what should I do now?
Answer : Well, first of all, don't ever freak the hell out or piss on your pants! Calm down a bit and get your head straight.
Now to the point, if your IP has ever been logged, their is a huge chance that you won't get caught. However don't be too happy about it. Try WHOISing the website and see if this website is an important source to the owner. If it is, you might wanna leave the website forever. What I mean is that, you can just leave the site alone so that the owner won't get too suspicious of what's happening.
Now for the most important part, next time use as VPN that never saves logs of your activity on the internet.
Examples of VPN:
1. nVPN (paid)
2. ProXPN (free)
You can also use proxy to keep yourself anonymous.
An advice from me and all other web hackers out there, no matter what you hack whether it's a bullshit website or a strict government website, always stay behind a VPN or Proxy and stay anonymous!
Question : What is a hash and what can I do with it?
Answer : To get to the point, a hash is basically an encryption. To be specific, a special encryption which requires hash cracking knowledge in order to reveal the plain text
Unlike other encryption, a hash can't be decrypted. In other words, to successfully crack a hash, you either might need to use a hash cracking website or an external hash cracking program with an enormous word list.
An example of a website for cracking hashes:
http://www.md5decrypter.co.uk/
Program for cracking : HashCat
Now there are different types of hashes out there and you can determine what kind of hash it is by studying the number of characters and the types of characters in the code.
Other types of encryption can be decrypted using "http://www.crypo.com"
Question : What is rooting a.k.a rooting rooting a server?
Answer : Rooting a server in simple words means that you're having a complete remote access to a server (computer). Rooting works on the basis of exploits. Most websites are running through Linux servers.
Now what will you gain when you root a server?
Easier said than done, you will gain remote control of the websites associated and run by that server. It's like hacking more than 1 website at a time.
Rooting can be done with Linux and Windows and is really a hard method of web hacking when you're a newb to it. You can search millions of tutorials out there about rooting, but you might wanna start from the basics first
Question: Is there any tool that can help me ease my web hacking activity while I hack websites?
Answer : First of all, never use tools that will do the job for you i.e hack everything for you! You don't wanna get your ass stuck while you watch a program hack websites for you and you don't learn anything
Now, there are many useful tools out there that can help you speed up your activity when you start hacking websites. These tools are mostly add-on installed in a browser called Firefox (which is really a good famous browser for hacking)
You can use some of the following:
1. HackBar add-on for Firefox :
Answer : You can start from the very basics to the advanced, but never be in a hurry when you're just starting.
Here's what you can study first:
1. HTML coding
2. PHP
3. Javascript
4. Cookies
Don't work hard on mastering all of them though, just learn the basics and try to get the hang of it.
Once you've got an idea about those four, methods of web hacking are what you're searching for now.
Many methods can be learned and used and some of them are listed below from the easiest to an intermediate level.
1. SQL injection
2. XSS
3. LFI/RFI
I recommend you to start from the basics of SQL injection. Then you can progress to further advanced methods of web hacking (More about those methods below)
Question : What are the types of web hacking methods?
Answer : Some of the types are explained below
1. SQL injection: Queries entered in order to extract information from the database of the website
Answer : You might need to do the following when you start hacking websites.
1. Proxy/ VPN (Virtual Private Network)
Always stay behind a proxy or a VPN no matter how useless or precious the site you're attempting to hacking could be.
And a VPN you can use is:
ProXPN: http://www.proxpn.com
Note: When using a VPN, always use one that doesn't store logs and it's really a serious matter.
Hack from another Wireless network if possible
2. Expose prevention
Never attempt to share your web hacking activity anywhere or anyone unless you trust that person so that you both can discuss and learn together. Some stranger might report you or blackmail you and that would really suck
Question : What should I do after I'm done with hacking the website?
Answer : You don't wanna get caught or reported or trace. Here are some tips.
1. Logs in the admin panel's website
After you're done with everything i.e defacing/shelling, make sure to erase the logs created in the panel. Their is a possibility your IP could be stored in one of their directories
2. Erase your tracks
Make sure to delete everything done on your browser i.e cookies, logs, logins etc
You can do this using CCleaner
3. Pride of success
Don't be too proud sharing what you have just done, some people are really not trust-worthy and could open up a report anytime.
Be happy of what you've done and share to ones you have trust on.
Moreover, stay stealthy at anytime.........
I received many questions like this. I helped many readers and finally reached conclusion that most of them were not reading my article completely and carefully. So, read this article completely and carefully. This is most common question of most of the readers regarding website hacking.
Hope you liked my tutorial and it cleared your doubts. If none the above answered your questions , don't hesitate to ask me in comments and I'll be answering them for you on my next up coming FAQ article. Nevertheless,if you have any other questions, feel free to contact me.
Thats it. I hope now, you will have most of your doubts about RATs cleared. This article is meant only for you. If you still have problems in RATs, don't hesitate to ask me in comments.
Enjoy wEb HaCkInG...
In the past few days, I've seen a lot of people having troubles and get stuck at a certain point while they hack. But, some readers were just not able to get out their problems. So in this article, i am going to answere these most of the problems/questions and hopefully you'll find this article useful
I was just going through comments made by you guys and noticed some readers left unanswered or they were not convinced by me. So, here are answers to some of commonly asked questions about Website hacking.
You might be interested in some of our other articles:
- How To Unlock BlackBerry Cell Phones
- Email Password stealer to hack find password of email account
- Facebook, Hotmail, Gmail Passowrd hacking through Winspy Keylogger
- Remote Password Hacking Software - Sniperspy keylogger
- How To Hack Password Through Mobile
Website Hacking : Common Web Hacking Problems Solutions
Q : What is a shell when it comes to web hacking?
Answer : Well, basically a shell is a type of .php file needed to be uploaded on a hacked website or a host in order to make it work. The way is works is not that complex if you wonder. With a shell uploaded to your hacked website or host, you can alter almost anything using it.While you're using a shell, you will be able to:
- Delete Website Directories and upload your deface page
- Can be used to DDoS another website (depends on what type of shell you're using
- Having a shell with many functions, you can also crack MD5 Hash, modify another php file, mass mail someone, email bomb an email!
Q: What does defacing mean and what's a deface page?
Answer : Defacing, in most certain cases, means that you wanna upload a specific file of yours,mostly a message to prove the administrator that you hacked the website. If you think about it, it's relatively similar to a deface page. A deface page, while hacking a website, is simply a message to convey to the owner of the website that you've owned their security.
Most people do this for fun, fame, or other stuff that can satisfy your hacking skills. If you're a beginner in web hacking, defacing a site will be considered as a big success for you just like me :)
Question : A common difference between a shelled website and a defaced website?
Answer : Simply answering, a shelled website can be used as hosting for illegal operations, can be used for DDoSing and other functions a shell can perform, while a defaced website is simply a type of message, mostly threatening and fun which conveys the owner of the website that their security is low and that you owned them.
Question : My IP was logged while I was hacking, what should I do now?
Answer : Well, first of all, don't ever freak the hell out or piss on your pants! Calm down a bit and get your head straight.
Now to the point, if your IP has ever been logged, their is a huge chance that you won't get caught. However don't be too happy about it. Try WHOISing the website and see if this website is an important source to the owner. If it is, you might wanna leave the website forever. What I mean is that, you can just leave the site alone so that the owner won't get too suspicious of what's happening.
Now for the most important part, next time use as VPN that never saves logs of your activity on the internet.
Examples of VPN:
1. nVPN (paid)
2. ProXPN (free)
You can also use proxy to keep yourself anonymous.
An advice from me and all other web hackers out there, no matter what you hack whether it's a bullshit website or a strict government website, always stay behind a VPN or Proxy and stay anonymous!
Question : What is a hash and what can I do with it?
Answer : To get to the point, a hash is basically an encryption. To be specific, a special encryption which requires hash cracking knowledge in order to reveal the plain text
Unlike other encryption, a hash can't be decrypted. In other words, to successfully crack a hash, you either might need to use a hash cracking website or an external hash cracking program with an enormous word list.
An example of a website for cracking hashes:
http://www.md5decrypter.co.uk/
Program for cracking : HashCat
Now there are different types of hashes out there and you can determine what kind of hash it is by studying the number of characters and the types of characters in the code.
Other types of encryption can be decrypted using "http://www.crypo.com"
Question : What is rooting a.k.a rooting rooting a server?
Answer : Rooting a server in simple words means that you're having a complete remote access to a server (computer). Rooting works on the basis of exploits. Most websites are running through Linux servers.
Now what will you gain when you root a server?
Easier said than done, you will gain remote control of the websites associated and run by that server. It's like hacking more than 1 website at a time.
Rooting can be done with Linux and Windows and is really a hard method of web hacking when you're a newb to it. You can search millions of tutorials out there about rooting, but you might wanna start from the basics first
Question: Is there any tool that can help me ease my web hacking activity while I hack websites?
Answer : First of all, never use tools that will do the job for you i.e hack everything for you! You don't wanna get your ass stuck while you watch a program hack websites for you and you don't learn anything
Now, there are many useful tools out there that can help you speed up your activity when you start hacking websites. These tools are mostly add-on installed in a browser called Firefox (which is really a good famous browser for hacking)
You can use some of the following:
1. HackBar add-on for Firefox :
- Has a built in automatic column-number posting when you use UNION SELECT in SQL injection
- Tools you need when you XSS
- Built-in Text to Hex and Hext to Text
- A big space for customizing your queries
- A very efficient tool for adding/deleting/modifying cookies
- Organized layout and a friendly GUI
- Manage all the activities your browser performs i.e record the activities your browser is performing live
- A very useful tool for uploading Shells on a hacked site (Used for renaming your shell.php.jpg to shell.php
- Replay the activity on your browser while you alter your cookies to make changes
- Mostly used in LFI (Local File Inclusion)
- Instantly records the connections being made in your browser from the websites opened
Answer : You can start from the very basics to the advanced, but never be in a hurry when you're just starting.
Here's what you can study first:
1. HTML coding
2. PHP
3. Javascript
4. Cookies
Don't work hard on mastering all of them though, just learn the basics and try to get the hang of it.
Once you've got an idea about those four, methods of web hacking are what you're searching for now.
Many methods can be learned and used and some of them are listed below from the easiest to an intermediate level.
1. SQL injection
2. XSS
3. LFI/RFI
I recommend you to start from the basics of SQL injection. Then you can progress to further advanced methods of web hacking (More about those methods below)
Question : What are the types of web hacking methods?
Answer : Some of the types are explained below
1. SQL injection: Queries entered in order to extract information from the database of the website
- Error Based SQL injection
- Union Based SQL injection
- Time Based SQL injection
- Blind SQL injection
- String Based SQL injection
- String Based WAF bypassing SQL injection
- String-Error Based WAF Bypassing SQL injection
- WAF Bypassing Double Query SQL injection
- Persistent - Can be used for cookie stealing
- Non-Persistent- Can be used as an HTML injection, commonly used for website vulnerabity proofs
- /proc/self
- Log Poisoning
- Malicious Image Upload
Answer : You might need to do the following when you start hacking websites.
1. Proxy/ VPN (Virtual Private Network)
Always stay behind a proxy or a VPN no matter how useless or precious the site you're attempting to hacking could be.
And a VPN you can use is:
ProXPN: http://www.proxpn.com
Note: When using a VPN, always use one that doesn't store logs and it's really a serious matter.
Hack from another Wireless network if possible
2. Expose prevention
Never attempt to share your web hacking activity anywhere or anyone unless you trust that person so that you both can discuss and learn together. Some stranger might report you or blackmail you and that would really suck
Question : What should I do after I'm done with hacking the website?
Answer : You don't wanna get caught or reported or trace. Here are some tips.
1. Logs in the admin panel's website
After you're done with everything i.e defacing/shelling, make sure to erase the logs created in the panel. Their is a possibility your IP could be stored in one of their directories
2. Erase your tracks
Make sure to delete everything done on your browser i.e cookies, logs, logins etc
You can do this using CCleaner
3. Pride of success
Don't be too proud sharing what you have just done, some people are really not trust-worthy and could open up a report anytime.
Be happy of what you've done and share to ones you have trust on.
Moreover, stay stealthy at anytime.........
I received many questions like this. I helped many readers and finally reached conclusion that most of them were not reading my article completely and carefully. So, read this article completely and carefully. This is most common question of most of the readers regarding website hacking.
Hope you liked my tutorial and it cleared your doubts. If none the above answered your questions , don't hesitate to ask me in comments and I'll be answering them for you on my next up coming FAQ article. Nevertheless,if you have any other questions, feel free to contact me.
Thats it. I hope now, you will have most of your doubts about RATs cleared. This article is meant only for you. If you still have problems in RATs, don't hesitate to ask me in comments.
Enjoy wEb HaCkInG...
Filed Under: Website Hacking
If you enjoyed this post and wish to be informed whenever a new post is published, then make sure you subscribe to my regular Email Updates.
Subscribe Now!
Do you need to know what your child is doing on the computer? Do you want to know what your loved ones or spouse or kids are doing on the computer? Do you need to monitor what your employees are doing during work hours? Are they working or playing?
Winspy Keylogger
is intended to help you in these kind of situations. It can show you exactly what is being done on the computer at any time.
Click Here To Download Winspy Keylogger
