[lPhiLG]

Okay then its my first tutorial so urm i blame The person who starts page 2 =] k then lets begin my epic fail tutorial on how to Deface/Plant a shell in a Habbo/WOW private server (or anything else that has webdav)

Step 1:
Pretty simple.
find a website that goes www.website.com/webdav
that then says as its content "WebDav Test" or somthing like that eh :D

Step 2:
Opening Up The "Map Network Drive"
Meth0d 1(Right Click On MyComputer) WINDOWS XP
Meth0d 2(Click The Start Bar) WINDOWS 7

Step 3:
Click on "sign up for online storage of conect to a network server"
Itll load. Click Next. "Choose Another Network Location".

Step 4:
Input www.site.com/webdav
Login Username Is Default: wampp
Login Password Is Default: xampp
Login.

Step 5:
Browse Files Until you see The "WebDav" Directory and copy your shell.php
usually c99shell.php or whatever shell you have .php.

Step 6:
go to www.site.com/webdav/shell.php replace shell.php with the name of your shell.

step 7:
Go back to all the files. go to htdocs. go to global.php edit to deface page. edit index.html to deface
save them username and password is the password you used to login.

POW
-=-=
[= Tutorial By My Mind =]

[HaxOr❤]

Not working :S

[short] Too shrt [/short]

[PrOx3rStYl3]

thanx will try it..
short] Too shrt [/short]

[lPhiLG]

Not working :S

[short] Too shrt [/short]

It is either that they have changed username and pass
or they deleted WebDav directoy :D Sorry if this didnt help😅

[gsy]

it works but for me only for 10% of whole wo has a /webdav folder i scanned whole Poland and found only 51 Vurn pages/ip's

[lPhiLG]

it works but for me only for 10% of whole wo has a /webdav folder i scanned whole Poland and found only 51 Vurn pages/ip's

well atleast it worked ;)

[zZach]

Sir,

step1 has a broken link
kindly check it out :D

[Asus]

It works and this exploit is selling very good.

[BuyOMC]

way to go trying to release my tutorial

give me credits

[Dennis]

Old stuff is old lol.
On a side-note this is not an exploit..
Last time Apachefriends left the phpmyadmin user 'root' blank passworded, this time they set a stock user for webdav.

[Asus]

way to go trying to release my tutorial

give me credits

Well yeah for mentioning and bringing it back alive. It took me 30 mins to figure out your exploit. I just need IP's to scan and im complete.

[lPhiLG]

way to go trying to release my tutorial

give me credits

Its not yours i wrote it so go suck urself =]

[H@cker]

it works but for me only for 10% of whole wo has a /webdav folder i scanned whole Poland and found only 51 Vurn pages/ip's

so you found 51 site 10% , so what are you saying is that there is only 510 polish websites?

how you find websites with /webdav

can someone give me link from some website with /webdav , I just wanna see source code so I could make scanner...

[gsy]

so you found 51 site 10% , so what are you saying is that there is only 510 polish websites?

how you find websites with /webdav

can someone give me link from some website with /webdav , I just wanna see source code so I could make scanner...

there where only 510 polish ip's on the page which could use that app

PS: And you should know that if you found a page it could be that the pass is changed.
here the source:

Code

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"

    "http://www.w3.org/TR/html4/loose.dtd">

<html>

    <head>

        <meta name="author" content="Kai Oswald Seidler, Kay Vogelgesang, Carsten Wiedmann">

        <title></title>

    </head>

    <body>

        <center><b>WebDAV testpage</b></center>

    </body>

</html>
[/code]

[lPhiLG]

Dude This Is Gids -.- Stop Taking CREDITS u fagget -.-

Dude i wrote it all myself i had never even heard of Gids! so im taking credit
for what i have done!