09-03-2008, 12:30 PM
hello all. i been reading for some time now even on other places. i always been stuck on this part maybe some one could enlighten me about it or tell me what the next step is.
i have a bunch of websites / ftp access some cpanel. i'm lost at this next part. what do i do next. do i install a php shell on all of them if so then i done this part already. what is the next step. should i be looking for something on there web/ftp.
i mean there is so much stuff that one can do i just want to know what are more or less the basic steps. ( not defacing a web site or anthing like that )
my main goal is to get data off the web sites like cart info or passwords to database.
here is a question aswell. say a site that i have has a cart and i have access to a shell do i then add a expoilt like a SQL to the site so then i can inject and get info out. this is where i'm kind of lost. if i have full access to the web/ftp and cpanel do i need to run more expoilts to get cart info and what not.
i have a bunch of websites / ftp access some cpanel. i'm lost at this next part. what do i do next. do i install a php shell on all of them if so then i done this part already. what is the next step. should i be looking for something on there web/ftp.
i mean there is so much stuff that one can do i just want to know what are more or less the basic steps. ( not defacing a web site or anthing like that )
my main goal is to get data off the web sites like cart info or passwords to database.
here is a question aswell. say a site that i have has a cart and i have access to a shell do i then add a expoilt like a SQL to the site so then i can inject and get info out. this is where i'm kind of lost. if i have full access to the web/ftp and cpanel do i need to run more expoilts to get cart info and what not.