You are on page 1of 1

Hacking Password Protected Website's By Pinglocalhost

************************ There are many ways to defeat java-script protected websites. ome are very simplistic! s"ch as hitting #ctl-alt-del $when the password bo% is displayed! to simply t"rning offjava capability! which will d"mp yo" into the defa"lt page.&o" can try man"ally searching for other directories! by typing the directory name into the "rl address bo% of yo"r browser! ie' yo" want access to www.target.com . Try typing www.target.com(images .)almost ever y web site has an images directory* This will p"t yo" into the images directory!and give yo" a te%t list of all the images located there. +ften! the title of an image will give yo" a cl"e to the name of another directory. ie' in www.target.com(images! there is a .gif named gamestitle.gif . There is a good chance then! that there is a 'games' directory on the site!so yo" wo"ld then type in www.target.com(games! and if it isa valid directory! yo" again get a te%t listing of all the files available there. ,or a more a"tomated approach! "se a program like W-B ./0- from anawave! or Web Wacker. These programs will create a mirror image of an entire web site! showing all director ies!or even mirror a complete server. They are indispensable for locating hidden files and directories.What do yo" do if yo" can't get past an opening 1Password2e3"ired1 bo%4 . ,irst do an WH+5 6ook"p for the site. 5n o"r e%ample! www.target.com . We find it's hosted by www.host.com at 788.788.788. 7. We then go to 788.788.788.7! and then la"nch 9Web nake! and mirror the entire server. et Web nake to .+T download anything over abo"t :80. )not many HT;6 pages are bigger than this* This speeds things "p some! and keeps yo" from getting a lot of files and images yo" don't care abo"t. This can take a long time! so consider r"nning it right before bed time. +nce yo" have an image of the entire server! yo" look thro"gh the directories listed! and find (target. When we open that directory! we find its contents! and all of its s"b-directories listed. 6et's say we find (target(games(<ip(<ipinde%.html . This wo"ld be the inde% page that wo"ld be displayed had yo" gone thro"gh the password proced"re! and allowed it to redirect yo" here.By simply typing in the "rl www.target.com(games(<ip(<ipinde%.html yo" will be onthe inde% page and ready to follow the links for downloading. XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX )=5 >6/5;-2*XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX The 5nfo /bove 5s 6ame???. 5 =ont >ondone The @se +f This =oc"ment 5n / ;aliso"s ;anner. 5 "ggest That @ =ont =o it B"t @ =o What -ver @ Want. 5 Will .ot Be 2esponsible ,or /ny Thing That ;ight Happen To @ 5f @ @se This. '*

You might also like