+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Beginner Hacking (https://hackforums.net/forumdisplay.php?fid=4)
+----- Forum: Hacking Tutorials (https://hackforums.net/forumdisplay.php?fid=47)
+----- Thread: [TUT] Webdav Hacking And Defacing [TUT] (/showthread.php?tid=769520)
[TUT] Webdav Hacking And Defacing [TUT] - lPhiLG - Oct 26, 2010
Okay then its my first tutorial so urm i blame The person who starts page 2 =] k then lets begin my epic fail tutorial on how to Deface/Plant a shell in a Habbo/WOW private server (or anything else that has webdav)
Step 1:
Pretty simple.
find a website that goes www.website.com/webdav
that then says as its content "WebDav Test" or somthing like that eh :D
Step 2:
Opening Up The "Map Network Drive"
Meth0d 1(Right Click On MyComputer) WINDOWS XP
Meth0d 2(Click The Start Bar) WINDOWS 7
Step 3:
Click on "sign up for online storage of conect to a network server"
Itll load. Click Next. "Choose Another Network Location".
Step 4:
Input www.site.com/webdav
Login Username Is Default: wampp
Login Password Is Default: xampp
Login.
Step 5:
Browse Files Until you see The "WebDav" Directory and copy your shell.php
usually c99shell.php or whatever shell you have .php.
Step 6:
go to www.site.com/webdav/shell.php replace shell.php with the name of your shell.
step 7:
Go back to all the files. go to htdocs. go to global.php edit to deface page. edit index.html to deface
save them username and password is the password you used to login.
POW
-=-=
[= Tutorial By My Mind =]
* - HaxOr❤ - Oct 26, 2010
Not working :S
[short] Too shrt [/short]
* - PrOx3rStYl3 - Oct 26, 2010
thanx will try it..
short] Too shrt [/short]
* - lPhiLG - Oct 27, 2010
(Oct 26, 2010 03:16 PM)HaX0r^ Wrote: Not working :S
[short] Too shrt [/short]
It is either that they have changed username and pass
or they deleted WebDav directoy :D Sorry if this didnt help😅
* - gsy - Oct 27, 2010
it works but for me only for 10% of whole wo has a /webdav folder i scanned whole Poland and found only 51 Vurn pages/ip's
* - lPhiLG - Oct 27, 2010
(Oct 27, 2010 02:51 AM)gsy Wrote: it works but for me only for 10% of whole wo has a /webdav folder i scanned whole Poland and found only 51 Vurn pages/ip's
well atleast it worked ;)
* - zZach - Oct 27, 2010
Sir,
step1 has a broken link
kindly check it out :D
* - Asus - Oct 27, 2010
It works and this exploit is selling very good.
* - BuyOMC - Oct 27, 2010
way to go trying to release my tutorial
give me credits
* - Dennis - Oct 27, 2010
Old stuff is old lol.
On a side-note this is not an exploit..
Last time Apachefriends left the phpmyadmin user 'root' blank passworded, this time they set a stock user for webdav.
* - Asus - Oct 27, 2010
(Oct 27, 2010 03:36 AM)Gids Wrote: way to go trying to release my tutorial
give me credits
Well yeah for mentioning and bringing it back alive. It took me 30 mins to figure out your exploit. I just need IP's to scan and im complete.
* - lPhiLG - Oct 27, 2010
(Oct 27, 2010 03:36 AM)Gids Wrote: way to go trying to release my tutorial
give me credits
Its not yours i wrote it so go suck urself =]
* - H@cker - Oct 27, 2010
(Oct 27, 2010 02:51 AM)gsy Wrote: it works but for me only for 10% of whole wo has a /webdav folder i scanned whole Poland and found only 51 Vurn pages/ip's
so you found 51 site 10% , so what are you saying is that there is only 510 polish websites?
how you find websites with /webdav
can someone give me link from some website with /webdav , I just wanna see source code so I could make scanner...
* - gsy - Oct 27, 2010
(Oct 27, 2010 10:18 AM)H@cker Wrote: so you found 51 site 10% , so what are you saying is that there is only 510 polish websites?
how you find websites with /webdav
can someone give me link from some website with /webdav , I just wanna see source code so I could make scanner...
there where only 510 polish ip's on the page which could use that app
PS: And you should know that if you found a page it could be that the pass is changed.
here the source:
Code
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"
"http://www.w3.org/TR/html4/loose.dtd">
<html>
<head>
<meta name="author" content="Kai Oswald Seidler, Kay Vogelgesang, Carsten Wiedmann">
<title></title>
</head>
<body>
<center><b>WebDAV testpage</b></center>
</body>
</html>
[/code]* - lPhiLG - Oct 28, 2010
(Oct 27, 2010 01:19 PM)nathanha17 Wrote: Dude This Is Gids -.- Stop Taking CREDITS u fagget -.-
Dude i wrote it all myself i had never even heard of Gids! so im taking credit
for what i have done!