Hack Forums
DNN method - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: DNN method (/showthread.php?tid=4248591)



DNN method - Developer9 - May 25, 2014

some what, I can not get to upload.

it should appear when I type this:

Code
javascript:__doPostBack('ctlURL$cmdUpload','')

[Image: 00df3f22cd418c59190b83b5dfedaf4c.png]


everything stays the same on the page


* - LevelUp - May 25, 2014

You're supposed to inject the Javascript via your browser console.


* - sam2011hacker - May 25, 2014

read my tutorial about DNN here - https://hackforums.net/showthread.php?tid=2700524


* - Developer9 - May 26, 2014

(May 25, 2014 04:38 PM)sam2011hacker Wrote:  read my tutorial about DNN here - https://hackforums.net/showthread.php?tid=2700524

I have followed it but when I put the javascript into the URL and press enter the page stays the same, am also using Firefox


* - Atai - May 26, 2014

Note that all of these websites who contains "/tabid/36/language/en-US/Default.aspx" wont be vulnerable against DotNetNuke hacking. Keep on trying or give us the website.


* - Beladonis - May 26, 2014

Don't put the javascript command in the URL bar, it won't work on Firefox
You have to write it on the Firefox or Firebug console


* - sam2011hacker - May 26, 2014

(May 26, 2014 05:10 AM)Developer9 Wrote:  I have followed it but when I put the javascript into the URL and press enter the page stays the same, am also using Firefox

Press CTRL+SHIFT+K and in console tab paste the javascript code, then press Enter. See if that works for you. If it isn't the i guess site isn't vulnerable to DNN.


* - Team4o4 - May 26, 2014

I just tried the DNN method on quite a few sites and I always get a broken image symbol... Like as shown here:
http://caslpo.com/portals/0/hf.asp;me.jpg