Feb 8, 2016 09:57 AM
(This post was last modified: Feb 9, 2016 07:51 AM by Xenious.)
Hey HF!
So i started to exploit WebDAV shells and i thought i would share this method with you guys.
Some free WebDAV websites you could use
http://pastebin.com/DVxmjRzA
- First you are going to need some stuff, download the .zip file on the link below.
Exploiter: http://www.mediafire.com/download/5cw8s2...WebDAV.rar
Scan: https://www.virustotal.com/nl/file/351ba...454950032/ (1 Detection because of the PHP Shell.)
- Preparing for exploiting.
Open the file /Exploiter/in.txt (Here we are going to add our WebDAV Websites.
Example: http://90.179.176.181/webdav/
Put the Example website in in.txt and save the file.
(If you want to use the free WebDAV websites i provided (http://pastebin.com/DVxmjRzA) then add all of those websites into in.txt)
- Lets start exploiting
Now open ExploitSCANNER.bat (If you don't tust it check the code)
Now its going to automaticly exploit the WebDAV Website we entered in in.txt.
When its done it should say this. (If its done than the Example website is fixed)
[img]http://b.1339.cf/rdmkfpo.png[/img]
- The ending
Now the website should be exploited.
Now go into out.txt and you will see your website with the up.php upload shell.
Now goto that link: http://90.179.176.181/webdav/up.php and now you can upload your shell (c99, b374k, ect.) and deface or backdoor the website.
Hope this helped, PM me if you need any help
🤝
So i started to exploit WebDAV shells and i thought i would share this method with you guys.
Some free WebDAV websites you could use
http://pastebin.com/DVxmjRzA
- First you are going to need some stuff, download the .zip file on the link below.
Exploiter: http://www.mediafire.com/download/5cw8s2...WebDAV.rar
Scan: https://www.virustotal.com/nl/file/351ba...454950032/ (1 Detection because of the PHP Shell.)
- Preparing for exploiting.
Open the file /Exploiter/in.txt (Here we are going to add our WebDAV Websites.
Example: http://90.179.176.181/webdav/
Put the Example website in in.txt and save the file.
(If you want to use the free WebDAV websites i provided (http://pastebin.com/DVxmjRzA) then add all of those websites into in.txt)
- Lets start exploiting
Now open ExploitSCANNER.bat (If you don't tust it check the code)
Now its going to automaticly exploit the WebDAV Website we entered in in.txt.
When its done it should say this. (If its done than the Example website is fixed)
[img]http://b.1339.cf/rdmkfpo.png[/img]
- The ending
Now the website should be exploited.
Now go into out.txt and you will see your website with the up.php upload shell.
Now goto that link: http://90.179.176.181/webdav/up.php and now you can upload your shell (c99, b374k, ect.) and deface or backdoor the website.
Hope this helped, PM me if you need any help
🤝
