[vikhyat1996]

In IIS Exploit we can upload the Defaced page on the Vulnerable Server without any Login. It is most Easiest way to Hack any site.

STEP 1:

Click on Start button and open "RUN".

[img]http://1.bp.blogspot.com/-Jp6FInbqAzg/Td8-yvFWs8I/AAAAAAAAAFY/2qPyMhG9o20/s320/IIS+exploit1.JPG[/img]


STEP 2:
Now Type this in RUN
%WINDIR%\EXPLORER.EXE ,::{20D04FE0-3AEA1069A2D8-08002B30309D}\::{BDEADF00-C265-11d0BCED-00A0C90AB50F}
[img]http://4.bp.blogspot.com/-dS2v9js2a28/Td8_XBMSxYI/AAAAAAAAAFc/a2E4VcPGCfQ/s320/IIS+exploit2.JPG[/img]


Now A Folder named "Web Folders" will open.


STEP 3:
Now "Right-Click" in the folder and Goto "New" and then "Web Folder".

[img]http://1.bp.blogspot.com/-gyPSmn5gvg4/Td9AO_jEchI/AAAAAAAAAFg/9q-h0bFCwvM/s1600/IIS+exploit3.JPG[/img]

STEP 4:
Now type the name of the Vulnerable site in this. e.g." http://autoqingdao.com/" and click "Next".
[img]http://1.bp.blogspot.com/-taYjjQpjNrc/Td9E5vVcSxI/AAAAAAAAAFk/TcbYBp_Bo-g/s1600/IIS+exploit4.JPG[/img]

STEP 5:
Now Click on "Finish"
[img]http://4.bp.blogspot.com/-Xg8qiQYL0Z4/Td9FRZWPyNI/AAAAAAAAAFo/kZaFhzfOpdc/s1600/IIS+5.JPG[/img]

STEP 6:
Now the folder will appear. You can open it and put any deface page or anything.
[img]http://2.bp.blogspot.com/-c7yXoaE1mpE/Td9FtumNpDI/AAAAAAAAAFs/aPXTvLXpc_8/s1600/IIS+exploit6.JPG[/img]


STEP 7:
I put text file in that folder. Named "securityalert.txt" (you can put a shell or HTML file also). If the file appear in the folder then the Hack is successful but if it don't then the site is not Vulnerable.

"In your case it will be " www.[sitename].com/[file name that you uploaded] "
🤝

[Jones.]

Nice tutorial but is there a dork for finding IIS sites?

[vikhyat1996]

Nice tutorial but is there a dork for finding IIS sites?

there's may be one but i do not used it,i only find them

[itsDroll]

this doesn't work at all...
when i do it all it does is open computer.

[vikhyat1996]

its works for me....
i don post without checking it

[Mewtwо]

How can we know if a website is vulnerable ?

[CoLeEe]

Spoiler (Click to View)%WINDIR%\EXPLORER.EXE ,::{20D04FE0-3AEA-1069-A2D8-08002B30309D}\::{BDEADF00-C265-11d0-BCED-00A0C90AB50­F}

This Command it's not works for me.

[vikhyat1996]

it works for me,PM me ,i will show you through TV

[NextGenHacking]

Command Doesnt work for me either. It just opens up my computer...

Another Method for Windows 7:
1- Start -> Computer
2- Right click and hit "Add a Network Location"
3- Direct to the website you want.

A Problem with this tutorial is that upon adding the sites details you need an admin User and Pass to confirm the folder creation.

Hope that was useful :D

[Glimpse]

It doesn't work for Windows 7 users.

[Great Prosperity]

What versions of IIS does this exploit involve?

How do you determine if the site is vulnerable?

[vikhyat1996]

Command Doesnt work for me either. It just opens up my computer...

Another Method for Windows 7:
1- Start -> Computer
2- Right click and hit "Add a Network Location"
3- Direct to the website you want.

A Problem with this tutorial is that upon adding the sites details you need an admin User and Pass to confirm the folder creation.

Hope that was useful :D

thanks i tried it using windows XP. i didn't knew that.
trying on my laptop

[Toph Beifong]

looks like a very good tutorial, easy to follow with pic's :D, gonna try out in a bit.

[Mario]

Its a good tutorial. I would like to know any dorks or how to know if it is a vunarable site

[Anonymous_Hacker]

Thank you , this tread is very interresting for somebody.