Author: The fallen leaf flutters about [J.L.S.T]
Sources of information: Security leaf technology club [J.Leaves Security Team] (http://00day.cn)
The typing hits hand good tired. Saw in the evil behind-the-scenes manipulator fallen leaf this edits the article. Has taken several WEBSHELL with the following skill. However could not bring this paper (I to rip all day long down evil behind-the-scenes manipulator magazine that page. )
Therefore has hit down. - _-! Possible fallen leaf where to have the original text. Forgot to want to him. +_+
--------------------------------------------------------------------------------
In the NOhack first several issue of magazines, many small snails have written some in the invasion process small skill, lets the human look loudly shouts satisfies a craving! This time, I also write some me the small skill which uses in the invasion process, hoped that everybody likes!
1. Judges system which the server uses
After for example our goal website is “http://www.00day.cn/forum/index.php” that we changes the address http://www.00day.cn/forum/index.PHP, again glances over has a look whether to have the page, if exists, then the server uses the system is windows, if the demonstration does not exist, what then the server has the possibility to use very much is the *nix system.
2. Ewebeditor takes the new skill which stands
Ewebeditor everybody should be again familiar? Uses the default password admin888 debarkation first, not good on downloading default database `/db/ewebeditor.mdb”, if the default database also changed we should give up? Here tells everybody me the experience! Is with the password admin999 debarkation, or the input “/db/ewebeditor1013.mdb” could download to the database. This method has 80% probabilities to be able to take the goal!
3. Social worker's small skill
In invasion time, if the goal website has forum, we may try the social worker, for example a website is “www.00day.cn”, the manager name is admin, then we may try with the password “00day” and “00day.cn” land, this method most suits in invasion large-scale company website time uses!
4. Time invasion thought development
Sometimes we have obtained the goal website manager password, but could not find the backstage, this is may try to land with FTP, for example, the goal website is the password which” www.00day.cn “obtains is “bishi”, we may try to use “00day” “00day.cn” www.00day.cn to take FTP user, with “bishi”: Carries on the debarkation as the FTP password, the success probability may very big!
5. When invasion obtains the manager name
When sometimes in the invasion is similar the website which sends in the news spreads a net, poured into obtained the manager password, but could not attain manager's name, what in the website also didn't have forum, at this time how should manage? We may open a news casually, however the hand looks for such as “the submission” carefully “the promulgator” and so on phrase, “the submission” was generally manager's name.
Other pages: : 1 * 2 * Next>>
|
You are here: hacking technology
> hacker invade
> Content
Category: Home
> hacker invade