by FDubya on July 29th, 2006

FDubya

Question

Help answer this question below.

How does someone "hack" into a website?

  • Like
  • Report

Answers. Showing one answer.

  • by Darkling on August 1st, 2006

    Darkling

    First, remember that every website is a collection of files stored on a computer somewhere. If an attacker can compromise that computer and gain access to the files with enough permission to edit them, he can do whatever he wants. There are several news stories a year about companies or agencies that have their home page defaced http://www.securitypronews.com/insiderreports/insider/spn-49-20060731NASASiteAttacksReported.html . As of the writing of this answer, NASA was the latest victim of such an attack.

    If the attacker wants to make the target website temporarily unavailable, all he has to do is crash the program or the computer. If he wants to deface it, he has to get priveledges on the computer that would allow him to edit the website files. He can attempt to do this through any open port and program or by trying to directly log into the machine.

    Programs use ports to access the internet. Well known programs or services use the same ports all the time and are easy to find. Web servers usually use port 80. If an attacker wanted to target an individual's or company's web server, he would interrogate port 80 to see if he could find out which web server program is running there and which version the victim is using.

    The attacker can then exploit any vulnerabilities that exist in that particular piece of software. There are many different ways a program can be broken (buffer overflow for example) and a wise system administrator applies all patches and updates the manufacturer provides to close these holes.

    That said, doing these sorts of things is illegal and just plain mean. There are many ways such an attacker leaves evidence and it's not worth the jail time.

    Comments
    • To the first rater: I teach this type of subject to make a living. If I make a mistake, I am eager to learn from it. Please explain how this answer is somewhat useful and what I may do to improve it. Thank you.

      Darkling

      by Darkling on August 4th, 2006

    • great answer darkling. Here is a good rating to make up for the undeserved bad one =)

      davoomac

      by davoomac on August 7th, 2006

    • Thanks, Davoomac. You're swell :)

      Darkling

      by Darkling on August 8th, 2006

    • How in the world did this get a low rating? The kicker is, the boinkhead who downrated probably couldn't write a decent answer to this question if the survival of the entire human race depended upon it. Here's a much deserved "Useful".

      Jodie44

      by Jodie44 on August 14th, 2006

    • I appreciate it, Jodie44. Let's hope the survival of the entire human race depends on some other boinkhead :D

      Darkling

      by Darkling on August 14th, 2006

    • I've always wondered this myself. Thanks Darkling for explaining.

      Yeux

      by Yeux on May 22nd, 2007

    • I'm so glad I could help :)

      Darkling

      by Darkling on May 22nd, 2007

    • so.. its seems you know a lot about this stuff.. Is there a way to get access into a web site and edit it? someone uploaded pictures of my friend on a gossip website and were wondering how we can login to delete them.. help? thanks!

      Lady D

      by Lady D on January 26th, 2009

    • Like
    • Report

    8 comments | Post one | Permalink

Want to attach an image to your answer? Click here.

Did this answer your question? If not, then ask a new question or create a poll.

You're reading How does someone "hack" into a website?

Follow us on Facebook!

Related Ads