Posts: 30
Threads: 1
Joined: Jun 2024
Greetings, everyone. I tried to find admin panels on several major websites with admin creds, but unfortunately didn't get good results.
In most cases, phasers or web vulnerability scanners that include admin panels search (e.g. invicti scanner) are excellent for this task.
In my case, the sites are self-written, I tried all the classic methods: Fuzzing, scanners, brute force, studying the source code in the client part, google docs, git hub. How else can you try to find the authorization page in the admin panel?
Posts: 206
Threads: 44
Joined: Jun 2023
 
scraping the site, probably
Posts: 30
Threads: 1
Joined: Jun 2024
Ran the maximum number of pages through Burp, watched stake, files - nothing.
I know that sometimes panels can be hosted at other addresses for security reasons, I'd like to know how to look for them in that case, other than trying to fish out the address using social engineering
Posts: 111
Threads: 1
Joined: Feb 2024
(07-07-2024, 02:20 PM)HunterBiden_G4ngSt4 Wrote: Ran the maximum number of pages through Burp, watched stake, files - nothing.
I know that sometimes panels can be hosted at other addresses for security reasons, I'd like to know how to look for them in that case, other than trying to fish out the address using social engineering
did you try also dirb. nikto, gobuster, stuff like that?
This forum account is currently banned. Ban Length: (Permanent)
Ban Reason: Leeching | http://breached26tezcofqla4adzyn22notfqw...an-Appeals if you feel this is incorrect.
Posts: 30
Threads: 1
Joined: Jun 2024
(07-08-2024, 05:17 AM)ent3r Wrote: (07-07-2024, 02:20 PM)HunterBiden_G4ngSt4 Wrote: Ran the maximum number of pages through Burp, watched stake, files - nothing.
I know that sometimes panels can be hosted at other addresses for security reasons, I'd like to know how to look for them in that case, other than trying to fish out the address using social engineering
did you try also dirb. nikto, gobuster, stuff like that?
Yeah, I told you I've tried both web application vulnerability scanners and bruteforce.
I think the admin panel is at a different address, but it is somehow connected to the website, so there must be a way to find out its address technically, not socially. Perhaps you should sparse the site pages and files more thoroughly and examine the source code.
Posts: 30
Threads: 1
Joined: Jun 2024
up up up up up up up up up up up up up up up up up up up up up up up up up up up up reply here
Posts: 30
Threads: 1
Joined: Jun 2024
up up up up up up up up up up up up up up up up up up up up up up up up up up up up reply here
Posts: 1
Threads: 0
Joined: Jul 2024
send me the website you are talking about
Posts: 30
Threads: 1
Joined: Jun 2024
up up up up up up up up up up up up up up up up up up up up up up up up up up up up reply here
|