How to Become an Elite Hacker Part 4: Hacking a Website. [Part 1] « Null Byte :: WonderHowTo

Welcome back my fellow army of hackers! Today we'll be hacking a website. Hacking is technically not the right word used here. It should be defacing! So we are going to deface a website...What's Defacing?Website defacement is an attack on a website that changes the visual appearance of the website. For example: you've got a website that only shows 1 word. That word is Hi. When defacing you (the h@cker) are going to change that very same word into anything you want. (usually you'r Alias).How to Deface?Usually a defacement is done by using this method (SQL injection). There are other methods involving PHP, but SQL is more common and far more easy to use! So let's get started.First let's make a list of things that we need:Vulnarble website for SQL injectionThe admin passwordShell script (So you'r able to gain admin controls)What Is a SQL InjectionA SQL injection is a method to gain access and deface a website.SQL is used to design the databases. The information is stored in databases. And with this "Exploit" we'll hack in to that very same database using SQL.Finding a Vulnerable WebsiteFirst we'll need a website vulnerable to a SQL injection. There is a simple way to test a website. But the challenge is to actuallyfinda website. For this we'll use some Google dorks.Google DorksGoogle dorks are used to search for something on Google in a advanced way. Basically you'r telling Google what to look for. If would say FILETYPE=PDF, everybody would understand that i want a file with a .pdf extension. Now this works almost the same for Google. Here are some useful Dorks for our SQL injection. Just past them in Google, and press search!inurl:index.php?id=inurl:buy.php?category=inurl:news.php?id=These should do the trick. Now testing for vulnerability.Go to the selected page and after the link add a 'Then press enter and if you get an error that means that the site is vulnerable. i choose forThis site.So i have the link:http://www.irishsanghatrust.ie/news.php?id=33Then for the SQL injection test add a'http://www.irishsanghatrust.ie/news.php?id=33'And you'll get an error. Here are some screenshots showing you before and after the'.Before the ' was added (Look at the URL)After the ' was added (look at the URL)ConclusionAs you can see it all ends heremuhahaha!!!This is were i would like to stop it for now. I could continue but the "How-To" Would be way to long and most of allBORING.So be sure to look for:How To Become An Elite Hacker Part 4: Hacking A Website [Part 2]A Shoutout to Naughty Criss; He gave me the idea to do a how-to about Defacing!Want to start making money as a white hat hacker?Jump-start your hacking career with our2020 Premium Ethical Hacking Certification Training Bundlefrom the newNull Byte Shopand get over 60 hours of training from cybersecurity professionals.Buy Now (90% off) >Other worthwhile deals to check out:97% off The Ultimate 2021 White Hat Hacker Certification Bundle99% off The 2021 All-in-One Data Scientist Mega Bundle98% off The 2021 Premium Learn To Code Certification Bundle62% off MindMaster Mind Mapping Software: Perpetual LicenseRelatedHow To:The Essential Skills to Becoming a Master HackerBecome an Elite Hacker, Part 3:Easy DDOSAdvice from a Real Hacker:The Top 10 Best Hacker MoviesA Hackers Advice & Tip:Choosing Your Path. Knowing Where to Learn & How to Learn It **Newbies Please Read**Become an Elite Hacker, Part 1:Getting StartedNews:How to Study for the White Hat Hacker Associate Certification (CWA)White Hat Hacking:Hack the Pentagon?News:8 Tips for Creating Strong, Unbreakable PasswordsHack Like a Pro:Linux Basics for the Aspiring Hacker, Part 11 (Apache Web Servers)How To:Why You Should Study to Be a HackerHow To:The Novice Guide to Teaching Yourself How to Program (Learning Resources Included)Hugging the Web (Part 3:The Google Bloodhound)Hack Like a Pro:How to Hack Web Apps, Part 2 (Website Spidering with WebScarab)Hack Like a Pro:The Ultimate Social Engineering HackNews:Anonymous Hackers Replace Police Supplier Website With ‘Tribute to Jeremy HammMastering Security, Part 1:How to Manage and Create Strong PasswordsHow To:How Hackers Take Your Encrypted Passwords & Crack ThemGoodnight Byte:HackThisSite, Realistic 3 - Real Hacking SimulationsCommunity Byte:HackThisSite, Realistic 3 - Real Hacking SimulationsNews:Student Sentenced to 8mo. in Jail for Hacking FacebookHow To:Score Free Game Product Keys with Social EngineeringCommunity Byte:HackThisSite Walkthrough, Part 1 - Legal Hacker TrainingHow To:Noob's Introductory Guide to Hacking: Where to Get Started?Community Byte:HackThisSite, Realistic 4 - Real Hacking SimulationsTVs Are for Old People:A Guide to Handheld ConsolesHow To:Hack Wireless Router Passwords & Networks Using HydraHow To:Hack a Radio to Pick Up Different Frequencies - Including Law Enforcement & MoreTera Online:Emphasis  on GameplayNews:Finding the Exploits Out in the World (For Beginner Hackers)How To:Sneak Past Web Filters and Proxy Blockers with Google TranslateGoodnight Byte:HackThisSite, Realistic 4 - Real Hacking SimulationsHow To:Conceal a USB Flash Drive in Everyday ItemsCommunity Byte:HackThisSite Walkthrough, Part 2 - Legal Hacker TrainingNews:The Coach's Corner/Pre-PubertyCommunity Byte:HackThisSite, Realistic 2 - Real Hacking SimulationsCommunity Byte:HackThisSite, Realistic 1 - Real Hacking Simulations