how can i get the password of a webserver ???
Printable View
how can i get the password of a webserver ???
Why do you want to know?
More details are always helpful ;)
Is this for that hackersclub challenge that you asked about eariler?
just probe it (no not like that..) view the source, try telneting, try malforming the URL..... its not hacking its using your brain (which is hacking...)
there are many webservers and these webservers can have many different types of password, 1 thing doesnt work for every single problem, you have to learn to adapt and apply techniques that arent in some tutorial,
be more specific, Im sure the others will tell you this....
i2c
Rachid Abdallah- do us a favor and reword your question! If you don't I have a definate feeling that you won't be here tommorrow, if that long!Quote:
how can i get the password of a webserver ???
use please and thank yous............ask the server nicely or it won't give the password to you
Hi,
If you are still looking for hackersclub, I think that what remains is now hackersclub.net
Try this:
http://www.zionmainframe.net/main/hack/index.html
They seem to have a mature and sensible attitue to what "true hacking" is about. It is worth reading the opening page at least ;)
Please be careful and stay out of trouble..................I suspect that the guys who run the site possibly have a pale blue six pointed star on their flag :D
I think the domain name was derived from The Matrix. Not what you're thinking Nihil.
i see that there is 2 kinds of peaple here
helpfull which i truly thank
and hopeless which give nothing but silly comments
any way there are really peaple here who know what they are doin
thanks for the greate help
There's also 2 kinds of people that ask questions:Quote:
posted Today 07:59 AM
(post #8)
i see that there is 2 kinds of peaple here
helpfull which i truly thank
and hopeless which give nothing but silly comments
any way there are really peaple here who know what they are doin
thanks for the greate help
The ones who expect us to give them the answer no matter what, and ask questions without giving any details whatsoever like we are supposed to read their mind,
and there's peopl who ask for help politely, give as much detail as possible so we can assist them better and who realize that if we do not have the answer, we'll probably guide them to the right direction.
Think of us as doctors. If you go to a doctor and tell them "I'm Sick, Heal me"....expect to be asked quite a few questions for the doctor to understand you better, and come up with a better solution to your illness I.E. If you have allergies...etc etc.
Now, if you go to the doctor, and introduce yourself, give the doctor some information about your medical history, you can save yourself a lot of time, and get a solution faster..
Guess which person resembles you the closest.
oops, I smell something ;) but I agree with Cybr1d
You want the password for a webserver:
-Brute Force:
Guess a Billion times by using a program or by teetering away yourself
-Social Engineering:
If you can convince the ISP or Host that you are the host of the site, they might be able to help you in someway...
-Keylogger:
Put a keylogger on the users machine and have the logs sent to you
-Watch those packets:
Get to the head of his/her network and set up a program that catches all the packets (ethereal, windump, tcpdump) however this may not work if they SSH or use any secure login.
-Ask the person:
Pretend you are someone you are not and ask the webmaster for his info. Maybe you are his DNS server host and you are working for tech support
-Find an exploit of some sort:
Then you don't need a password
Regardless if you have good intentions or not, this is an information site that provides information. If you were to ask a college professor this same question in class, I am sure that they would answer it instead of giving you a lecture about "That's not where you need to stick your nose"
Yes, the professor would tell you, but you have to estabilish some sort of trust with the professor for him/her to give you that information...for example be that professor's student.Quote:
Regardless if you have good intentions or not, this is an information site that provides information. If you were to ask a college professor this same question in class, I am sure that they would answer it instead of giving you a lecture about "That's not where you need to stick your nose"
If you walk up to any professor in any college, and you blantantly ask "How do I get the password of a web server" Most likely they'll tell you to piss off especially if you are 14 years old;)
If I or any other long time member would have asked the same question, we would have most likely gotten a better answer...don't tell me you're surprised :shocked:
Thats just the way the cookie crumbles :D
::ha-sign:, how long have you been saving that one?Quote:
don't tell me you're surprised :shocked:
But even with good standing before asking a question:
If I go to an Auto mechanic and say "My car won't Run" I would expect to be asked a question or 5.. even if I were to give the mechanic a $50 note.. the result would be almost the same.. save he may be tempted to give me some very generalised information.. Even the example of the College professor.. you and he/her have to have a level of communication before a broad questeion is asked.. that is.. if you are in a conversation with some friends and a anothe friend walks up and joins the conversation.. you ask a question.. do you expect this person to be with you in the conversation well enough to .. first know what it is you are talking about.. then to even answer the question with any level of sensiabilty save a very general answer..
and realy Lansing_Banda all you gave was a general answer.. it may have been helpful ..but then it could have been a long winded www.google.com answer.. .. the please reply was useless.. A lot of getting information from other people is about trust and PROVIDING Sufficient information in the Question.. in other words ASK SMART QUESTIONS..
regardless of the critics i got here
i would like to say that i like to keep my threads and replies as simple as possible
second of all : not because i'm a 14 year old kid you should ignore me!!!
man, look to the future -- i know programming in several languages -- i know how to CGI --
i know a bit about security -- i know how to learn about how computer systems work
man, i won't be going to college untill 4 years at least,
so give me a break man!!!!
and yeh Cybr1d
i totaly support the american peaple to get rid of BUCH :
CLICK ME - Kerry Does NOT flip flop or LIE! Bush Misleaded our country- CLICK ME
you're right
Err....Did you click? LOL :DQuote:
and yeh Cybr1d
i totaly support the american peaple to get rid of BUCH :
CLICK ME - Kerry Does NOT flip flop or LIE! Bush Misleaded our country- CLICK ME
you're right
Then you wont be getting far. Just because you're 14, doesn't mean you can't put some thought into the question....there's plenty of young members here who can come up with at least a half assed decent question. How long are you going to be using "I'm only 14 give me a break"??? The "awww, he's only 14" **** aint gonna fly here.Quote:
regardless of the critics i got here
i would like to say that i like to keep my threads and replies as simple as possible
No1 is ignoring you.....as you might have noticed, I have responded to your threads....? LOL...er ok, I am looking at the future....what am I looking for? Good job, you know all that stuff, now you need to know how to ask a question.Quote:
second of all : not because i'm a 14 year old kid you should ignore me!!!
man, look to the future -- i know programming in several languages -- i know how to CGI --
i know a bit about security -- i know how to learn about how computer systems work
Asking a question on 'AO' is kind of like going to a doctor or to a veternarian. The doctor needs a lot of information, and the vet need a lot of probing (because his patients can't talk).
Since it would be impossible for any of use to do alot of physical probing, it would be better if you didn't act like a dog, and to be a human instead.
Provide any information needed. And it sure doesn't matter how old you are......if you are talking to adults, try not to throw temper tantrums, they will get you no where.
Guys, for adult we have to be responsible of whatever we post or teach. I think Lansing_banda have taught him too much. You dont want to give information to wrong person that go around doing wrong things and tell the rest "Ohhh, Lansing_Banda taught me that and i dont know it is illegal".
That's why i support cybrid, dont give any suggestion/ information unless his intension is clear.
Good information may bring him into jail and regret for the rest of his life.
it doesnt matter either way...
oh, such and such said i could drive without a license... i didnt know it was illegall... whos fault is it???Quote:
You dont want to give information to wrong person that go around doing wrong things and tell the rest "Ohhh, Lansing_Banda taught me that and i dont know it is illegal".
it doesnt matter. its more of a morallity thing at AO. we COULD give out information knowing its for illegal purposes and take ZERO responsibilty, but we dont because its immoral and unethical.... and we just like to make sure before we do
:)
CTO
I think that is an important point. We have a moral responsibility to advise people if what they are proposing is illegal or will get them into trouble at work/school/college.Quote:
Good information may bring him into jail and regret for the rest of his life.
The problem is that people come here with very little knowledge and experience, have heard of and half understood a concept, and think this will allow them to achieve something. The classic example is the student who wants to bypass his institution's policies and firewall to use P2P and play internet games :D . I do not think that it is worthy of this site to simply flame or neg such people, if we are a true security minded site we must tell them that what they are proposing is a bad idea and WHY it is.
I am sure that many of us encounter this in the workplace............the user says: "can you get this to do X,y and z" when what the SHOULD be asking is "I want to do a, b and c; how can I do it"..........I am afraid that I have a zero tolerance of half baked user "solutions" :eek:
I think that Lansing_Banda's post was reasonably balanced.............it explained the principles/concepts but not HOW to do it.
In which case we would be:Quote:
we COULD give out information knowing its for illegal purposes
1. Aiding and abetting
2. Inciting
3. An accessory after the fact
4. Conspiring
And probably a whole load of other things as well
just my thoughts on the matter
once again my post has been taken out of context as above.....
no, we can provide information, but its the person who commits the act that is at fault. UNLESS naturally if you say its perfectly fine and legal, but if they ask a question, you give them an answer thats it. what ever they do with the INFORMATION your provided them its their liability.
**Please note i am Australian, the other people are from where ever and have different laws**
however, in ANY case, it really does come down to the morality of the members at AO
I don't think that I have taken you out of context, particularly as you have virtually repeated yourself.Quote:
we COULD give out information knowing its for illegal purposes and take ZERO responsibilty
OK I do not know Australian law, but I find it hard to believe that you can just supply information and advice without also accepting responsibility.
As we are not responding in a professional capacity there is no civil/commercial comeback. For example I could give someone advice and they lose all their data, fry their motherboard or whatever..............I am not legally responsible because there is no contractual relationship between us. If there were, you can be sure that I would have some damn good Professional Liability Insurance :D
The difference is between CRIMINAL and CIVIL laws. If I know that the information is required for illegal purposes and still supply it, then there is no way I canI think that you will find that is the same in Australia as well, it certainly is in Europe, and I would imagine, North America (any comments guys?)Quote:
take ZERO responsibilty
OK, let's approach it from the other way..............most of the defences I have seen in cases involving these particular legal concepts have been "I did NOT know........." That seems to be the direct opposite of what you are suggesting?
Can you check that out, particularly the criminal law vs. civil law aspect.
look, just because you dont know what your doing doesnt mean its not your fault...
and just because its LEGAL doesnt make it RIGHT!
the point im trying to say, is that if you provide information to someone KNOWING its for illegal purposes then yes, you are at fault. but im saying if you dont know because they dont specify what exactly they are asking, and we give them information and they use it illegal (without out knowledge) then its nothing to do with us.
Case1:
hi, i need to get a server password.
re1: hi, you can iehter do this this and this... (all illegal things but not stating)
case1: i got arrested cause i did what you said.... (re1: is at faullt.)
**
Case2: i need a password.....
re2: why?
case2: because i looked myself out (legal purpose)
re2: do this this and this (legal OR illegal it doesnt matter)
case2: thanks i got arrested because i did this...
** please note if you are under the impression its perfectly legal what they are trying to do. then whatever information you give them, is regardless.**
Hi Mate!
Wonderful thing the English language, isn't it? :)
I believe that we are actually arguing the same case?
Your comments on morality I left aside, as they were obviously correct. I was more concerned with the legality bit.
Yes, you are quite right...........sort of if I taught someone how to drive; it doesn't mean he should use that to drive the getaway car from a bank robbery? That would NOT be my fault.
Yet if I taught him how to make a bomb..................
Cheers :D
no, you are incorrect in saying that. if you teach them to make a bomb, the ONLY law your breaking is if you actually create the bomb yourself. you can provide plans and schematics but provided you didnt know it was to actually make the bomb, no issues.
i dont understand what is so hard to get?? i know its probably borderline, but its not aiding and abetting. (thats when you participate in the actual event)
but anyways, im in Australia as i said. Nihil is right, i think we are arguing the same point. but yea, thats all ive got to say :) peace
maybe we need a new name for this thread :p hahahahah,
tried to scan the webb server for passwords?
wow wow wow
freez for a second !!!!!!!
have you noticed the sentence under my name that says : "AO newbie" !!!!
give me a break let me learn first how to ask some questions then judge me guys
if it might seem insecure for you to answer me, them don't
Then let us help you with a legitimate question. Please don't be a troll in these forums. I hate to give negs out, but you are definately on my "watch list" d00d!Quote:
Originally posted here by Rachid Abdallah
wow wow wow
freez for a second !!!!!!!
have you noticed the sentence under my name that says : "AO newbie" !!!!
give me a break let me learn first how to ask some questions then judge me guys
if it might seem insecure for you to answer me, them don't
Strike 1!