+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Beginner Hacking (https://hackforums.net/forumdisplay.php?fid=4)
+----- Forum: Hacking Tutorials (https://hackforums.net/forumdisplay.php?fid=47)
+----- Thread: [Tutorial] Exploiting WebDAV (/showthread.php?tid=5163263)
[Tutorial] Exploiting WebDAV - Xenious - Feb 8, 2016
Hey HF!
So i started to exploit WebDAV shells and i thought i would share this method with you guys.
Some free WebDAV websites you could use
http://pastebin.com/DVxmjRzA
- First you are going to need some stuff, download the .zip file on the link below.
Exploiter: http://www.mediafire.com/download/5cw8s2ct21732x7/Exploiting+WebDAV.rar
Scan: https://www.virustotal.com/nl/file/351ba2a622172824a28726110824b6299c695bf005c4ca89073a62b7d7c7a642/analysis/1454950032/ (1 Detection because of the PHP Shell.)
- Preparing for exploiting.
Open the file /Exploiter/in.txt (Here we are going to add our WebDAV Websites.
Example: http://90.179.176.181/webdav/
Put the Example website in in.txt and save the file.
(If you want to use the free WebDAV websites i provided (http://pastebin.com/DVxmjRzA) then add all of those websites into in.txt)
- Lets start exploiting
Now open ExploitSCANNER.bat (If you don't tust it check the code)
Now its going to automaticly exploit the WebDAV Website we entered in in.txt.
When its done it should say this. (If its done than the Example website is fixed)
[img]http://b.1339.cf/rdmkfpo.png[/img]
- The ending
Now the website should be exploited.
Now go into out.txt and you will see your website with the up.php upload shell.
Now goto that link: http://90.179.176.181/webdav/up.php and now you can upload your shell (c99, b374k, ect.) and deface or backdoor the website.
Hope this helped, PM me if you need any help
🤝
* - bass booster - Feb 9, 2016
What's the dork to find the links to them?
I tried inurl:webdav but didn't get anything
* - SIM-1534439 - Feb 9, 2016
Thanks thats a nice tutorial bud!
* - Xenious - Feb 9, 2016
(Feb 9, 2016 10:42 AM)bass booster Wrote: What's the dork to find the links to them?
I tried inurl:webdav but didn't get anything
I have never used the dork and i don't know if a dork exists for it.
I used http://www.shodan.io just go to the search bar on the top of tha page and type: (win32) Dav/2 ; Dav/2 ; Dav/2 (win32)
All 3 will give out websites that uses webdav.
(Feb 9, 2016 10:43 AM)Trukfit Wrote: Thanks thats a nice tutorial bud!
Thanks man :)
* - dafr34k - Feb 22, 2016
nice tutorail, thank you bro, awesome.
* - WhiteDm - Feb 22, 2016
Definitely helpful tut,good job mate,but the thing is how to find dorks to get private exploitable sites from other source cause im sure Shodan have limited sites
* - Xenious - Feb 23, 2016
(Feb 22, 2016 01:37 PM)dafr34k Wrote: nice tutorail, thank you bro, awesome.
Thanks man! :)
(Feb 22, 2016 05:09 PM)WhiteDm Wrote: Definitely helpful tut,good job mate,but the thing is how to find dorks to get private exploitable sites from other source cause im sure Shodan have limited sites
You can create an account on Shodan and it gives you more updates and it refreshes the website list.
* - slambergamer - Feb 27, 2016
tq xeinious nice tutorial.. any good new dork for webdave?
* - CyberError - May 17, 2016
when i try to upload the shell it ask for username and password ?
* - regime - May 18, 2016
Great tutorial Thanks for sharing !!!
* - R^ptor - May 24, 2016
Xenious great TUT man! HQ member rh
(May 17, 2016 08:25 AM)sahilbisht17 Wrote: when i try to upload the shell it ask for username and password ?
Try defaults man 🤝
Code
user: wampp
pass: xamppRE: [Tutorial] Exploiting WebDAV - notatechguy - Oct 22, 2019
Thank you Xenious, will keep this in mind!
RE: [Tutorial] Exploiting WebDAV - Dobby - Oct 23, 2019
Why are people gravedigging these old shiiiit posts?
RE: [Tutorial] Exploiting WebDAV - Flexi Yum - Oct 31, 2019
nice tutorial and good sharing bro..