+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Beginner Hacking (https://hackforums.net/forumdisplay.php?fid=4)
+----- Forum: Hacking Tutorials (https://hackforums.net/forumdisplay.php?fid=47)
+----- Thread: Hack Website with IIS Exploit. [Tutorial] (/showthread.php?tid=1388402)
Pages: Pages
1
2
Hack Website with IIS Exploit. [Tutorial] - vikhyat1996 - Jun 17, 2011
In IIS Exploit we can upload the Defaced page on the Vulnerable Server without any Login. It is most Easiest way to Hack any site.
STEP 1:
Click on Start button and open "RUN".
[img]http://1.bp.blogspot.com/-Jp6FInbqAzg/Td8-yvFWs8I/AAAAAAAAAFY/2qPyMhG9o20/s320/IIS+exploit1.JPG[/img]
STEP 2:
Now Type this in RUN
%WINDIR%\EXPLORER.EXE ,::{20D04FE0-3AEA1069A2D8-08002B30309D}\::{BDEADF00-C265-11d0BCED-00A0C90AB50F}
[img]http://4.bp.blogspot.com/-dS2v9js2a28/Td8_XBMSxYI/AAAAAAAAAFc/a2E4VcPGCfQ/s320/IIS+exploit2.JPG[/img]
Now A Folder named "Web Folders" will open.
STEP 3:
Now "Right-Click" in the folder and Goto "New" and then "Web Folder".
[img]http://1.bp.blogspot.com/-gyPSmn5gvg4/Td9AO_jEchI/AAAAAAAAAFg/9q-h0bFCwvM/s1600/IIS+exploit3.JPG[/img]
STEP 4:
Now type the name of the Vulnerable site in this. e.g." http://autoqingdao.com/" and click "Next".
[img]http://1.bp.blogspot.com/-taYjjQpjNrc/Td9E5vVcSxI/AAAAAAAAAFk/TcbYBp_Bo-g/s1600/IIS+exploit4.JPG[/img]
STEP 5:
Now Click on "Finish"
[img]http://4.bp.blogspot.com/-Xg8qiQYL0Z4/Td9FRZWPyNI/AAAAAAAAAFo/kZaFhzfOpdc/s1600/IIS+5.JPG[/img]
STEP 6:
Now the folder will appear. You can open it and put any deface page or anything.
[img]http://2.bp.blogspot.com/-c7yXoaE1mpE/Td9FtumNpDI/AAAAAAAAAFs/aPXTvLXpc_8/s1600/IIS+exploit6.JPG[/img]
STEP 7:
I put text file in that folder. Named "securityalert.txt" (you can put a shell or HTML file also). If the file appear in the folder then the Hack is successful but if it don't then the site is not Vulnerable.
"In your case it will be " www.[sitename].com/[file name that you uploaded] "
🤝
* - Jones. - Jun 17, 2011
Nice tutorial but is there a dork for finding IIS sites?
* - vikhyat1996 - Jun 17, 2011
(Jun 17, 2011 01:02 AM)Ryan7z Wrote: Nice tutorial but is there a dork for finding IIS sites?there's may be one but i do not used it,i only find them
* - itsDroll - Jun 17, 2011
this doesn't work at all...
when i do it all it does is open computer.
* - vikhyat1996 - Jun 17, 2011
its works for me....
i don post without checking it
* - Mewtwо - Jun 17, 2011
How can we know if a website is vulnerable ?
* - CoLeEe - Jun 17, 2011
Spoiler (Click to View)
This Command it's not works for me.
* - vikhyat1996 - Jun 17, 2011
it works for me,PM me ,i will show you through TV
* - NextGenHacking - Jun 17, 2011
Command Doesnt work for me either. It just opens up my computer...
Another Method for Windows 7:
1- Start -> Computer
2- Right click and hit "Add a Network Location"
3- Direct to the website you want.
A Problem with this tutorial is that upon adding the sites details you need an admin User and Pass to confirm the folder creation.
Hope that was useful :D
* - Glimpse - Jun 17, 2011
It doesn't work for Windows 7 users.
* - Great Prosperity - Jun 17, 2011
What versions of IIS does this exploit involve?
How do you determine if the site is vulnerable?
* - vikhyat1996 - Jun 18, 2011
(Jun 17, 2011 11:50 AM)NextGenHacking Wrote: Command Doesnt work for me either. It just opens up my computer...
Another Method for Windows 7:
1- Start -> Computer
2- Right click and hit "Add a Network Location"
3- Direct to the website you want.
A Problem with this tutorial is that upon adding the sites details you need an admin User and Pass to confirm the folder creation.
Hope that was useful :D
thanks i tried it using windows XP. i didn't knew that.
trying on my laptop
* - Toph Beifong - Jun 19, 2011
looks like a very good tutorial, easy to follow with pic's :D, gonna try out in a bit.
* - Mario - Jun 19, 2011
Its a good tutorial. I would like to know any dorks or how to know if it is a vunarable site
* - Anonymous_Hacker - Jun 19, 2011
Thank you , this tread is very interresting for somebody.