A question for anyone

[shihonoryu]

Hi. The world of hacking has always interested me. ive been a programmer for a while, and have recently taken up the challenge of ethical hacking.

now how would you go about hacking a website like this? [note: Please do not hack the website. simply a question because ive thought about this general situation a lot and the answer eludes me]

so would it would be a website like URL edited out or the general website like this and say you would want to deface it? out of grudge/ignorant message, whatever you like. yet it has no login forms. or search? is it possible?also, say you have a website that protects against mysql/JS injection what are your options then? is there any? also, is directory transversal a tactic used a lot? ive tried it before on some sites, and it never seems to work well for me.

i repeat this is not a "Halp me haxor thiswebsite plx" im trying to learn

Thank you for your time

[centip3de]

Hi. The world of hacking has always interested me. ive been a programmer for a while, and have recently taken up the challenge of ethical hacking.

now how would you go about hacking a website like this? [note: Please do not hack the website. simply a question because ive thought about this general situation a lot and the answer eludes me]

so would it would be a website like URL edited out or the general website like this and say you would want to deface it? out of grudge/ignorant message, whatever you like. yet it has no login forms. or search? is it possible?also, say you have a website that protects against mysql/JS injection what are your options then? is there any? also, is directory transversal a tactic used a lot? ive tried it before on some sites, and it never seems to work well for me.

i repeat this is not a "Halp me haxor thiswebsite plx" im trying to learn

Thank you for your time

You would have to find an exploit in the site, and then, well, exploit it. A site that has no login forms, or search is still open to SQL injection via the URL bar (still quite a common exploit). But, I think you need to realize that there are more exploits than just SQL/JS injection or directory transversal. If I were to type each one to you, it would take several hours to compile all the data, let alone typing it all in. My advice to you is to go and do some of the missions, read some of the articles, and then you should be able to answer your own question.

[tremor77]

There are cases in which a web"page" will have absolutely zero vulnerabilities. Then again, this page also probably has no interactivity or functionality and is just a static html. In that case... you need to research the host and determine if the host has any vulnerabilities. If you do not yet know how to gather website host information for a web"page" then you should probably do some learnin'