Hey guys i'm looking to crack a websites database to get a list of the emails signed up to it's forum service.
It looks as if they are using Phpbb but i can't be completely sure.
So far i have tryed to sqlmap them but it came back with no sql injection opportunities.
Any other ideas?
Thanks
Forum Thread: Ways to Read Websites Database
- Hot
- Active
-
Forum Thread: Changing IP Address 9 Replies
2 days ago -
Forum Thread: When My Kali Linux Finishes Installing (It Is Ready to Boot), and When I Try to Boot It All I Get Is a Black Screen. 8 Replies
1 wk ago -
Forum Thread: HACK ANDROID with KALI USING PORT FORWARDING(portmap.io) 12 Replies
2 wks ago -
Forum Thread: Hydra Syntax Issue Stops After 16 Attempts 2 Replies
1 mo ago -
Forum Thread: Hack Instagram Account Using BruteForce 208 Replies
1 mo ago -
Forum Thread: Metasploit reverse_tcp Handler Problem 47 Replies
3 mo ago -
Forum Thread: How to Train to Be an IT Security Professional (Ethical Hacker) 22 Replies
3 mo ago -
Metasploit Error: Handler Failed to Bind 41 Replies
3 mo ago -
Forum Thread: How to Hack Android Phone Using Same Wifi 21 Replies
3 mo ago -
How to: HACK Android Device with TermuX on Android | Part #1 - Over the Internet [Ultimate Guide] 177 Replies
3 mo ago -
How to: Crack Instagram Passwords Using Instainsane 36 Replies
3 mo ago -
Forum Thread: How to Hack an Android Device Remotely, to Gain Acces to Gmail, Facebook, Twitter and More 5 Replies
3 mo ago -
Forum Thread: How Many Hackers Have Played Watch_Dogs Game Before? 13 Replies
4 mo ago -
Forum Thread: How to Hack an Android Device with Only a Ip Adress 55 Replies
5 mo ago -
How to: Sign the APK File with Embedded Payload (The Ultimate Guide) 10 Replies
5 mo ago -
Forum Thread: How to Run and Install Kali Linux on a Chromebook 18 Replies
5 mo ago -
Forum Thread: How to Find Admin Panel Page of a Website? 13 Replies
6 mo ago -
Forum Thread: can i run kali lenux in windows 10 without reboting my computer 4 Replies
6 mo ago -
Forum Thread: How to Hack School Website 11 Replies
6 mo ago -
Forum Thread: Make a Phishing Page for Harvesting Credentials Yourself 8 Replies
6 mo ago
-
How to Hack Wi-Fi: Get Anyone's Wi-Fi Password Without Cracking Using Wifiphisher
-
How To: Find Identifying Information from a Phone Number Using OSINT Tools
-
How To: Scan for Vulnerabilities on Any Website Using Nikto
-
How To: Buy the Best Wireless Network Adapter for Wi-Fi Hacking in 2019
-
How to Hack Wi-Fi: Build a Software-Based Wi-Fi Jammer with Airgeddon
-
Hack Like a Pro: How to Conduct a Simple Man-in-the-Middle Attack
-
How To: Create a Metasploit Exploit in Few Minutes
-
How To: Check if Your Wireless Network Adapter Supports Monitor Mode & Packet Injection
-
How To: Use Burp & FoxyProxy to Easily Switch Between Proxy Settings
-
How to Hack Wi-Fi: Cracking WPA2 Passwords Using the New PMKID Hashcat Attack
-
How To: Use MDK3 for Advanced Wi-Fi Jamming
-
How To: Gain Complete Control of Any Android Phone with the AhMyth RAT
-
How To: Hack Wi-Fi Networks with Bettercap
-
How To: Intercept Images from a Security Camera Using Wireshark
-
How To: Create a Persistent Back Door in Android Using Kali Linux:
-
How To: Find Passwords in Exposed Log Files with Google Dorks
-
How to Hack Wi-Fi: Disabling Security Cameras on Any Wireless Network with Aireplay-Ng
-
How To: Exploit WebDAV on a Server & Get a Shell
-
How To: Create Rainbow Tables for Hashing Algorithms Like MD5, SHA1 & NTLM
-
How To: Bypass File Upload Restrictions on Web Apps to Get a Shell
3 Responses
Reconnaisance is key to any good hack.
Information is power; how are you meant to know which hack to use if you don't even know whether the board is using phpBB or not?
ghost_
Yes! Thanks for the answer, i think you're right.
I'll get to it.
Anything in particular i should watch out for?
SQL injections aren't the only way to achieve what you want. You could also steal the administrator session with XSS for example.
Share Your Thoughts