Please help me hack a school website
by alphaze - Saturday March 23, 2024 at 03:17 PM
#1
I did some enumeration with Burpsuite and Nmap but nothing else, how do I proceed? the website is gurukul.org and edu.gurukul.org.
I'm always using tor + proxy chains when doing anything with that site so, I should be safe. I do know some of the basics of hacking. I have hacked another school website before but it was much easier to hack because it had sql injection. But this one is a bit more complex...
Reply
#2
(Mar 23, 2024, 03:17 PM)alphaze Wrote: I did some enumeration with Burpsuite and Nmap but nothing else, how do I proceed? the website is gurukul.org and edu.gurukul.org.
I'm always using tor + proxy chains when doing anything with that site so, I should be safe. I do know some of the basics of hacking. I have hacked another school website before but it was much easier to hack because it had sql injection. But this one is a bit more complex...

Don't post your targets publicly on the forum if you want to avoid someone tipping them off. 

Try talking about which technologies the target web server uses and take it from there, rather than disclosing actual domain/subdomain.



#s3gt_translate_tooltip_mini { display: none !important; }


This forum account is currently banned. Ban Length: Permanent (N/A Remaining)
Ban Reason: Self-Ban
Reply
#3
(Mar 23, 2024, 04:23 PM)willywonka Wrote:
(Mar 23, 2024, 03:17 PM)alphaze Wrote: I did some enumeration with Burpsuite and Nmap but nothing else, how do I proceed? the website is gurukul.org and edu.gurukul.org.
I'm always using tor + proxy chains when doing anything with that site so, I should be safe. I do know some of the basics of hacking. I have hacked another school website before but it was much easier to hack because it had sql injection. But this one is a bit more complex...

Don't post your targets publicly on the forum if you want to avoid someone tipping them off. 

Try talking about which technologies the target web server uses and take it from there, rather than disclosing actual domain/subdomain.



#s3gt_translate_tooltip_mini { display: none !important; }

Thank you for your advice! The site uses wordpress 6.4.3
Reply
#4
(Mar 23, 2024, 03:17 PM)alphaze Wrote: I did some enumeration with Burpsuite and Nmap but nothing else, how do I proceed? the website is gurukul.org and edu.gurukul.org.
I'm always using tor + proxy chains when doing anything with that site so, I should be safe. I do know some of the basics of hacking. I have hacked another school website before but it was much easier to hack because it had sql injection. But this one is a bit more complex...

we ain't ur private army bruh
Reply
#5
Ah sweet you have posted your target website and not only made a datapoint for any brain dead analyst to find it. First learn OPSEC and then start hacking stuff my guy.
Reply
#6
Migth want to consider something else then the proxychains + tor .. youll be too loud. Any decent admin will spot the attack a mile away.
Reply
#7
(Mar 24, 2024, 02:51 AM)alphaze Wrote:
(Mar 23, 2024, 04:23 PM)willywonka Wrote:
(Mar 23, 2024, 03:17 PM)alphaze Wrote: I did some enumeration with Burpsuite and Nmap but nothing else, how do I proceed? the website is gurukul.org and edu.gurukul.org.
I'm always using tor + proxy chains when doing anything with that site so, I should be safe. I do know some of the basics of hacking. I have hacked another school website before but it was much easier to hack because it had sql injection. But this one is a bit more complex...

Don't post your targets publicly on the forum if you want to avoid someone tipping them off. 

Try talking about which technologies the target web server uses and take it from there, rather than disclosing actual domain/subdomain.



#s3gt_translate_tooltip_mini { display: none !important; }

Thank you for your advice! The site uses wordpress 6.4.3




Here is something you might find useful or interesting, here is some vulnerability's in wordpress 6.4.3: https://wpscan.com/wordpress/643/
Reply


Possibly Related Threads…
Thread Author Replies Views Last Post
  DeepExploit: AI-Powered Penetration Testing Tool op404 59 3,218 May 03, 2026, 11:17 PM
Last Post: rottenmaster
  Burp Suite with AI-Enhanced Plugins op404 31 2,396 May 03, 2026, 11:32 AM
Last Post: Mefisto
  AI-Powered Vulnerability Scanners: Acunetix & Nessus op404 57 3,685 Apr 29, 2026, 09:19 AM
Last Post: Usercomplex
  Malware Development - Part 4 op404 19 1,514 Apr 21, 2026, 11:30 PM
Last Post: Bugatti
  Bluesnarfing op404 10 1,003 Feb 10, 2026, 08:06 AM
Last Post: windandweather

Forum Jump:


 Users browsing this forum: 1 Guest(s)