Hacking a HTML website

[Infinityexists]

Is there any way we could hack a website totally based on HTML and no PHP / MySQL / ASP / Ajax  ?

[ande]

Copy-paste my PM please.

[Infinityexists]

Copy-paste my PM please.

Ande: Hacking html-only pages is not possible. Not by web application at least. You will need to look into exploiting the web server or other services running on the server

[neusbeer]

If they use <script></script> there can be a possibility,..
but don't count on it.
you can indeed try to break through their webserver,
ftp bruteforce, etc

[Infinityexists]

How to get into their web-server , their website sucks and they don't have a cpanel either , like when i type website.com:8080 or 8082 or 8083 it redirects me to nothing :S

they have a website without a cpanel install

[ande]

How to get into their web-server , their website sucks and they don't have a cpanel either , like when i type website.com:8080 or 8082 or 8083 it redirects me to nothing :S

they have a website without a cpanel install

Few people use cpanel. And even if they did, what you gonna do with it? It seams you are lacking some knowledge or skills for thinking outside the box, perhaps both. No offense of course, nothing wrong with that. I would suggest you look into buffer overflow and fuzzing. Perhaps programming if you do not already know that.

[neusbeer]

There is always 1 transmission possibility. how else can he update the site?
so changes are small.
... indeed think outside the box which ande already concludes.
check for open ports with for example nmap and look for flaws.
how the site is uploaded is a dead give away for the possibilities, so check How..
(frontpage, ftp, etc).
or just break in at his home/place where the server stands and start a fire or something

[Axon]

Copy-paste my PM please.

huh 
You could've said it here instead of asking him to copy-paste it, It's the same ? 

[ande]

huh 
You could've said it here instead of asking him to copy-paste it, It's the same ? 

I had already sent him the message when I saw this thread And because I am lazy, I asked him if he could copy-paste it.

[Satori]

You should always gather as much information on the target as possible.
For example, if it's hosted on shared hosting (which i suspect in this case) then there's a big chance that another webpage hosted on that server is vulnerable. Hack that site, root the box, edit the html page, voilà! you just pwnt the html page and a handful of other ones..


tl;dr: Find out everything you can before trying to hack it.

[Infinityexists]

Thanks everyone , When I'll be free i will look into it in detail