Saturday, August 16, 2014

Defacing a site

This is a hack that we see all over the web.
You visit a regular site that you usually visit, but you've realized that the site looks COMPLETELY different.

You soon realize the sites been hacked with the classic sign of the hackers on the bottom of the page.
But this is actually pretty simple.

First of all, if you want to deface a site, the easiest thing to do is to find a form on the site, in which they save under a file name which you specify.

Now when a site carelessly overwrites a file with the same name, we can exploit this.

Save the form title as ../index.hmtl which will be the file name which will overwrite the exsiting index.html on the site.
In the form description paste the code in html for the defacing site you want to build.

Once you hit submit, the existing index.html site will be overwritten with the new index.html form you made, and the site will crumble under the new page you've coded in the description.

I'll upload photos soon to make it more clearer.
Note: If the site renames the saved forms to a different file name if the name already exsists, this hack wont work.
If you liked this please rate and share.

No comments:

Post a Comment