No upload option in Admin panel how to deface after complete Admin access

[Infinityexists]

I got the Administrator access in to 15 different websites and complete database but i couldn't find any of the option to upload anything in the admin panel :/
how could i suppose to deface without the upload and having a complete SQL database

[Kulverstukas]

Deface is very lame. But if you certainly MUST do it, then you probably could make a new PHP file and paste the php shell code in there. Of course assuming that file management option is available and you have a writable directory.

Think out of the box, dude.

[ovi_x]

yep  do as kulverstukas sad try to  get your  self  some  shell in  the panel or  try  to get it  by  file  transfer you  got  ftp option

[Pak_Track]

I got the Administrator access in to 15 different websites and complete database but i couldn't find any of the option to upload anything in the admin panel :/
how could i suppose to deface without the upload and having a complete SQL database

I quote Phage, (who knows a lot about website hacking) "deface is lame."
 I haven't done much SQLi defacing but if the site is vulnerable to XSS and you can find a persistent vulnerability, you can enter this script into it:

Code: [Select]

-><script>window.location="PASTEHTML DEFACE PAGE LINK HERE";</script>and you can check if it's vulnerable with this:

Code: [Select]

<script>alert("xss")</script>
hope this helped you

[Daemon]

If you have admin access could you not just ftp your photos or whatever and edit the html to show your new photos?

Or am i missing something here?

[Pak_Track]

If you have admin access could you not just ftp your photos or whatever and edit the html to show your new photos?

Or am i missing something here?

he wants to completely deface the site like this: http://glovepie.org/

[techb]

he wants to completely deface the site like this: http://glovepie.org/

Who ever done that doesn't need to be on the internet. Skids, I swear....

[Pak_Track]

Who ever done that doesn't need to be on the internet. Skids, I swear....

i agree. more than half of these "hackers" are using Havij or SQL Map. And I don't understand what they get by defacing sites. It's not as if they learn or achieve something

[volcano123]

Who ever done that doesn't need to be on the internet. Skids, I swear....

Just have a sense of humor OP if you hacked a catholic website for instance put a picture of a pedo bear or something.  If you hack a government website post some fake news post about the vaccine they released causes cancer.


Stuff like that is indeed funny, the more believable the better.  Though I agree with what techb said, it's lame.  Your are not hacking you are more of a troll or a skiddy in my opinion.

[lucid]

Triple X is a gay ass name too.

[namespace7]

how could i suppose to deface without the upload and having a complete SQL database

From your question I can see that you don't really know how web dev works.
Looks like you have no idea about hacking at all. Defacing? Are you serious? Only retards who are desperate for attention and recognition do defacing.

If you want publicity go run around the town naked or something.

[geXXos]

If you hack a site and deface for a reason (ie. a company is treating its employees like shit or to pass a political message etc.) i'm fine with that, otherwise, deface is fail.



EDIT*
a deface where the attacker makes a comment like that:

hahaha, your site has been hacked by h4x0r1983883,hahahahha, admin you are a fool...
contacte me cocksucker@wannabehacker.skid

This is totally tragic.
But a deface like this imo is something that i may enjoy,

hello friends!
pandasecurity.com, better known for its shitty ANTIVIRUS WE HAVE BACKDOORED, has earning money working with Law Enforcement to lurk and snitch on anonymous activists. they helped to jail 25 anonymous in different countries and they were actively participating in our IRC channels trying to dox many others. Aside how clueless they are and how disgusting they look sucking police tiny dicks and even how much fun we got when they are trying to sell IT security services xD that only helps to endanger people even more;  they contribute to bring activist to jail. activists, not even hackers. common people who are trying desperately to denounce  the injustices happening on their countries right now.
we should just say:
yep we know about you.
how does it feels being the spied one?
eat cock now.

I don't condone anybody committing any kind of illegal activities, just saying..

[namespace7]

Exactly geXXos. Exactly. Leaving a subtle message isn't real deface in my eyes.

Especially if it is there for good reasons.

However the OP said clearly that he has like 15 admin accounts to different websites, so I really think they are just random websites and he intends to vandalize them. And that I dont like.

If I catch a guy who does website vandalizing in real life, then I would have a very serious talk with him.

[ovi_x]

we haven't heard  from  the main  man that  started  this  tread  sow pleas don't  spam to make  you'r lazy  asses post count  or I  might  believe that  Ande make  evreyone  vip  here

[techb]

As for the deface that was posted that I replied to, there was no reason for it. Who ever did it is a skid. GlovePie did nothing to anyone. They provided opensource code to help. The things they posted and provided where great and I have used there code myself. There was no reason other than being a douche to deface that site.