« previous next »
Pages: [1]

Author Topic: Access website through admin user + pass  (Read 269 times)

OneHappyTaco

  • Sr. Member
  • ****
  • Posts: 404
  • Reputation: 11
  • Who Dares Wins
  • Computers: Mac
  • iDevices: Iphone 4s
Access website through admin user + pass
« on: February 01, 2013, 08:50:37 pm »
I have just finished some sql injection on a site and have discovered a user and password for the administrator. I do not intend to deface the website or mess with it in any way. This was simply a test and the only results to a test, are fail or succeed. Now since I have discovered the user and password but there is no login at all in the site...
So my question is, how do admins access their sites with no login?
Logged

A3MIRAL

  • Leader
  • Hero Member
  • *****
  • Posts: 2899
  • Reputation: 105
  • A3MIRAL -- Reporting for Duty
    • A3MIRAL
  • Badges:
  • Computers: Dell XPS15 (6 GB ram, Core i7 @ 2.0 GHz, 750 GB HDD @ 7200 RPM)
  • iDevices: iPod touch 3G 32GB, iPhone 5 32GB
Re: Access website through admin user + pass
« Reply #1 on: February 01, 2013, 08:52:20 pm »
Depends what the account is for? Port scan could reveal FTP, SSH, those are most likely options
Logged

grinch

  • Administrator
  • Hero Member
  • *****
  • Posts: 1926
  • Reputation: 187
  • the digital grinch who stole your data
    • @DigitalGrinch
  • Badges:
  • iDevices: iPhone 3GS 4.3.3, HTC Evo V 4G ICS
Re: Access website through admin user + pass
« Reply #2 on: February 01, 2013, 08:53:35 pm »
u need to figure out what you have. Is the the sql root password? Is it the admin pass for the websites control panel? is it the ftp login to the site to add or remove .html files? Could be ssh credentials
Logged
If I help you or you appreciate my work, clicking that +1 button is the best thanks I could get.

My opinions are my own, you may agree or disagree with them, but they are only just that; opinions
For example: facebook is the microsoft of social networks

http://goo.gl/PiVjI

@DigitalGrinch
https://twitter.com/DigitalGrinch
I follow all iNinjas members back. PM me if I am not following you

OneHappyTaco

  • Sr. Member
  • ****
  • Posts: 404
  • Reputation: 11
  • Who Dares Wins
  • Computers: Mac
  • iDevices: Iphone 4s
Re: Access website through admin user + pass
« Reply #3 on: February 01, 2013, 08:56:38 pm »
That's what i thought at first, but then I scanned with nmap and the only two ports open were
443
80
LOL *facepalm*
Logged
Pages: [1]
« previous next »