Note: This basic method works only for websites with extremely low security barriers. Websites with robust security details will not be susceptible to this kind of simple attack.
Steps
1
Open the site you want to hack. Provide wrong
username/password combination in its log in form. (e.g. : Username : me
and Password: ' or 1=1 --)An error will occur saying wrong
username-password. Now be prepared your experiment starts from here.
- Right click anywhere on that error page =>> go to view source.
-
View the source code. There you can see the HTML coding with JavaScript.• There you find something like this....<_form action="...Login....">• Before this login information copy the URL of the site in which you are. (e.g. :"< _form..........action=http://www.targetwebsite.com/login.......>")
-
Delete the JavaScript from the above that validates your information in the server. Do this very carefully.—Your success in hacking the site depends upon how efficiently you delete the java script code that validates your account information.
-
Take a close look for "<_input name="password" type="password">"[without quotes] -> replace "<_type=password>" with "<_type=text>". See there if maximum length of password is less than 11 then increase it to 11 (e.g. : if then write ).
-
Go to file => save as and save it anywhere in your hard disk with ext.html (e.g.: c:\chan.html). -
Reopen your target web page by double clicking 'chan.html' file that you saved in your hard disk earlier.• You see that some changes in current page as compared to original One. Don't worry. -
Provide any username [e.g.: hacker] and password [e.g.:' or 1=1 --] You have successfully cracked the above website and entered into the account of List user saved in the server's database.
