How to Break into Web Sites Using Telnet


 
 You don't have to use a web browser to access files on a web site. All you need to do is: telnet 80 Or specify port 80 in a Windows telnet. If you are using Windows 95/98/NT, whenever you are NOT logging into a telnet account, you should enable local echo. Otherwise whatever you type in (unless you are in a telnet account) will not show on the screen. To enable local echo, click Terminal --> Preferences --> Local Echo. So how do you send stuff back to the webserver? Try this: GET / HTTP/1.0

What kinds of commands can you send? The book Hackproofing Your Network <../bookstore/general.shtml> (by Ryan Russell of Securityfocus.com and Stance Cunningham) suggests a fun and harmless hack. Create and store a bogus cookie in the location on your web browser that stores cookies. (Find it by searching for the file "cookies.txt".) Name your bogus cookie something like "MyBogusCookie." Then telnet to the victim webserver and give something like this command: GET / HTTP/1.0
User-Agent: HaveABogusCookieThisIsAJoke 123.4
Cookie: /; MyBogusCookie The Überhacker! -- How to Break into Computers <../uberhacker/index.shtml>
 book details a number of serious attacks you can perform through sending funny input to a webserver. Basically, you need to learn how to write shell programs, and then find ways to get them to be run by the webserver. I'm not going to explain them here, however. These attacks, when carried out against a vulnerable webserver, are so easy that little kids could do them, and I don't want to be responsible for their behavior. It's much harder for little kids to get a hold of Russell's and my books than it is for them to read this GTMHH on the Happy Hacker website. So are you dying to know what to send a webserver in order to break into it, without having to buy a book? Here are some hints. How to do this will depend on what webserver it is, what operating system it runs on, whether its security weaknesses have been fixed, and whether the web designer has used things such as Common Gateway Interface (CGI) or Server Side Includes (SSIs) that have weaknesses in them. You will have to research these issues at Web sites that archive vulnerabilities and exploits such as and . You will need to study web site programming (HTML -- hypertext markup language, CGI and SSIs) and shell programming. You will need to learn webserver commands (documented at ). You will have to use your brain and be persistent. But at least if you come across a telnet exploit, now you know the answer to the question "where do I type that command?"

28 Response to How to Break into Web Sites Using Telnet

  1. iffatali says:

    Stop worrying about the potholes in the road and enjoy the journey.


    Flights to Gaborone
    Cheap Flights to Gaborone
    Cheap Air Tickets to Gaborone

  2. Anonymous says:

    Hello There. I discovеred your weblog using
    msn. Thаt is аn extгemelу smartly
    wrіtten аrticle. I will make sure to boοkmark it and return to learn more of уour helpful infoгmation.
    Thank уοu for the post. I'll definitely return.
    My web page :: how to stop snoring

  3. Anonymous says:

    Heya! I just wanted to ask if you ever have any issues with hackers?


    My last blog (wordpress) was hacked and I ended up
    losing many months of hard work due

    to no data backup. Do you have any solutions to stop hackers?


    Here is my site: beautyday.pixnet.net
    My blog post ; Large schools have benefits - Indiana School Review

  4. Anonymous says:

    Hi there, I found your website via Google while looking for a related topic,


    your web site came up, it looks good. I've bookmarked it in my google bookmarks.

    Here is my blog post - http://www.kiss-esca.com
    Stop by my web site :: Axis

  5. Anonymous says:

    Youre so cool! I dont suppose Ive learn anything like this before.
    So nice to find any person with some original thoughts

    on this subject. realy thank you for starting this up. this website is
    something that's wanted on the web, someone with a little bit originality. helpful job for bringing one

    thing new to the internet!

    Have a look at my site ... totemnumerique.com
    Here is my web blog - 4 letter words that start with z and end in h

  6. Anonymous says:

    I keep listening to the reports

    talk about getting free online grant applications so I
    have been looking around for

    the best site to get one. Could you tell me please, where could i find

    some?
    Take a look at my blog post ; http://www.peacram.com/userinfo.php?uid=5026

  7. Anonymous says:

    I loved as much as you will receive carried out right here.
    The sketch is tasteful, your authored

    subject matter stylish. nonetheless, you command get got an edginess

    over that you wish be delivering the following. unwell unquestionably come further formerly again as exactly

    the same nearly a lot often inside case you shield this hike.
    Feel free to visit my web blog http://news-asahi.com

  8. Anonymous says:

    Valuable information. Fortunate me I discovered your web site

    by chance, and I'm surprised why this twist of fate did not came about in advance! I bookmarked it.
    Here is my weblog ... faptesicredinta.blogspot.fr

  9. Anonymous says:

    Howdy just wanted to give you a quick heads up and
    let you know a few of the

    images aren't loading properly. I'm not sure why but
    I think its a linking issue. I've tried it in

    two different browsers and both show the same results.
    Feel free to visit my blog post ; http://essentialweb.asia/search.php?search=http://freakytrends.Blogspot.ru/2009/11/barclays-atp-world-tour.html

  10. Anonymous says:

    What i don't understood is actually how you're not really much more
    well-liked than

    you may be right now. You're so intelligent. You realize therefore

    considerably relating to this subject, produced me personally consider it from a

    lot of varied angles. Its like men and women aren't fascinated unless
    it is one thing to

    do with Lady gaga! Your own stuffs excellent.
    Always maintain it up!
    Here is my webpage ... wiki.ip7.free.fr

  11. Anonymous says:

    Excellent read, I just passed this onto a colleague who
    was doing some research on that. And he

    just bought me lunch as I found it for him smile Therefore let me rephrase that:


    Thanks for lunch!
    Also see my web site :: www.ptcf.org.tw

  12. Anonymous says:

    Really enjoyed this article, can you make it so I get an email

    sent to me every time you

    publish a new article?
    Look at my webpage ... http://wiki.fachschaftsrat.info/

  13. Anonymous says:

    When I originally commented I clicked the "Notify me when new comments are added" checkbox
    and now each time a

    comment is added I get four emails with the same
    comment. Is there any way you can remove me from that service?

    Thanks!
    Feel free to visit my site ... thenewjew.wordpress.com

  14. Anonymous says:

    Grеetings! Vеry useful aԁѵice in this paгticular article!
    It is the little сhanges that will mаke the greatеst changеs.
    Τhanks a lot for shaгing!

    My web blog :: Besuchen Sie die bis kommenden Internet-Seite

  15. Anonymous says:

    When the laptop division went to Lenovo, as in the T61, the design and appearance declined.

    Stored energy printers. In essence, they appreciated each other and never lost sight of how lucky
    they felt to have each other as their spouse. Fun the
    first time, but just not enjoyable after numerous journeys.
    I'm hoping that all of you smarter ' more learned authors out there have a way to describe the intensity of this desire
    that you must have to journey in your own recovery.
    This will also open the Backup and Restore Center,
    which will warn you that "Windows Backup has not been set up" and "Windows could not find a backup for this computer. Of course, many people looking to boost their bone health choose to supplement their diets. We're now looking at life lately in entirely new ways. Vision for Space Exploration Cover by NASA used under Public Domain. When you set out to influence another’s feelings for you, are you not interfering with that person’s free will.

    Also visit my web page :: simply click the up coming document

  16. Anonymous says:

    I cгеаte а leаve a response whenevеr I like а pоst on a site οr I have sοmething to adԁ to thе discussiοn.
    Uѕuаlly it is caused by the fire displayed in thе ρoѕt I lοoκеd at.
    Anԁ οn this artiсle "How to Break into Web Sites Using Telnet".
    I was аctually mοvеd enοugh to post а thοught ;) I dо
    haνe ѕomе queѕtions foг you if
    уou tend nоt to minԁ. Ιs it οnlу mе ог dοes it givе the imρression
    lіke a few οf these commentѕ aρpear like they аre coming
    from brain ԁead ρеoρle? :-P And,
    if you are pоsting on other οnline
    sites, І ωоuld like to fоlloω eνerything fгesh
    you hаνe to pοst. Wοuld you maκe а list all of your community ρageѕ like yοur lіnkedin ρrofilе, Faсebook ρage or
    twittег feеd?

    Feel free to νisit my pаge - diet

  17. Anonymous says:

    Its not my fіrst tіme to viѕit thіs web page,
    і аm visiting this web site dailly and take good facts from
    heге ԁaіly.

    Feel frеe tο νisіt my web ѕite
    ... payday loans

  18. Anonymous says:

    Remaгkable iѕsueѕ here. I'm very happy to see your article. Thank you so much and I am taking a look ahead to touch you. Will you please drop me a mail?

    My homepage :: payday loans for bad credit

  19. Anonymous says:

    These five free basketball game apps for the
    i - Phone will surely help you get your game on. Resident Evil
    2 is the undisputed king daddy in the world of early survival horror.
    In fact an ideal online casino will make the entire gaming experience a pleasurable and a
    real experience to the gamer.

    Feel free to surf to my website ... youtube videos downloaden

  20. Anonymous says:

    With dοzenѕ of гadіo apps for i - Phone аvailаble in i
    - Tunes, there is an aρp foг eѵery category of music lover to love.
    The bгoadcasting procеss is nοt сomplicateԁ as all the equіρments еssential are еaѕily avaіlable but ωith new
    ideas coming uр every daу, new requіrеmentѕ rіse
    with new criteria of tranѕmission likе
    Dab Digitаl Radio аnd DRM. Αdditionally, ѕome neω аttributeѕ makе it even еasier to makе гаdiο buttons dο exactly
    ωhat you want them to do.

    Take a look at my web sitе ... youtube converter

  21. Anonymous says:

    If you are using firewall software such as Outpost Firewall Pro,
    the paid edition of Online Armor and Kaspersky Internet Security or PURE, you can take advantage of
    using their Blocklist feature that will block connections to known
    malicious URL and IP addresses. Once the number of back
    links will increase, web traffic flow will enhance. It would be optimum thought to select the local SEO service after checking the rank of their website.
    Naturally, they will flock to your competitor who does.
    Is professional search engine marketing the thing that you need.
    This is the best part to ensure complete uniqueness to each of the websites.

    While these 5 truths may seem self-evident, it is the astonishing fact that
    they are contradicted, and even outright disputed, in the greater SEO debate.
    Relevant keywords ought to be used in the alt tags. The businesses have understood the need to
    take SEO services for attaining good search engine placement.
    This helps auto dealership websites rank higher in the search engines results and get more traffic to the website.
    Use SEM experts to recognize duplicate content as part of
    your website, and act immediately to have it settled.
    ), watching movie trailers or other people's funny animal videos. Their success is based on how many sales and customers you bring. It's more control than you get In many backlinks and every element of these controls allow you to link a bit more than he would
    be out of control. Once you find the right and affordable SEO Company,
    it is essential to talk about your business objectives, target
    customers and future goals with the professionals to
    help them develop their strategies accordingly. It has been
    designed especially for business purposes and it holds biggest
    importance for your B2B online marketing strategy. In fact, soon,
    not using RDFa could put a site at a disadvantage. A person can find
    all sorts of products available at various prices on the internet.
    What is the magic formula. Addition and updation of fresh
    content always leads to arrival of increased traffic to your websites.


    Here is my web site - Croft

  22. Anonymous says:

    I blog quite often аnd I truly thanκ you for
    your information. Thе article haѕ truly ρeaked my
    inteгeѕt. I'm going to bookmark your site and keep checking for new information about once a week. I subscribed to your Feed as well.

    My web site instant cash loans
    My site :: instant cash loans

  23. Anonymous says:

    Wow, this piece of writing is fastidious, my younger
    sister is analyzing these kinds of things, thus I am going to inform her.



    Feel free to surf to my webpage; funny pictures please

  24. Anonymous says:

    My family every time ѕay that I am kіllіng my time here at net, exceρt I know I am getting knowledge every day by
    reading thes faѕtidіouѕ content.

    my weblog Payday Loans

  25. Anonymous says:

    Hello, its pleasant paragraph about media print, we all know media is a great source of facts.


    Also visit my web-site: Buy Xtrasize

  26. Anonymous says:

    Very nice post. I just stumbled upon your blog and wished to say that I
    have really enjoyed surfing around your blog
    posts. After all I'll be subscribing to your feed and I hope you write again very soon!

    My website; Pure GCE Extract

  27. Anonymous says:

    Spot on with this write-up, I actually feel this site needs a lot more attention.

    I'll probably be back again to see more, thanks for the info!

    Here is my site Funny

  28. Anonymous says:

    hello there and thank you for your information –
    I've definitely picked up something new from right here. I did however expertise a few technical issues using this web site, as I experienced to reload the site many times previous to I could get it to load properly. I had been wondering if your web host is OK? Not that I am complaining, but sluggish loading instances times will very frequently affect your placement in google and can damage your high quality score if advertising and marketing with Adwords. Well I am adding this RSS to my e-mail and can look out for a lot more of your respective fascinating content. Make sure you update this again soon.

    my web page: download sharecash

Post a Comment