DNN Attack For Beginners
What Is DNN ?
DNN stands for Dot Net Nuke. It have an remote arbitrary File Upload vulnerability. simply said iploading
vulnerrability.
Finding vulnerable websites
Find vulnerable websites by GOOGLE dorks :
inurl:/fck/fcklinkgallery.aspx
inurl:/tabid/36/language/en-US/Default.aspx
I got a target
Select "File" from list.
The in url bar paste the javascript ;
javascript:__doPostBack('ctlURL$cmdUpload','')
Now there appear a uploading bar on page. As seen be below :
your uploads will go to "http://www.site.com/Portals/0/shell.asp;.txt"
Hope You Enjoy....!
Shell Uploading In Wordress For Begginers Tutorial
Wordpress Shell Uploading.. Start
Hi..!
Manzoor ali Here..!
Today i am Going To Show You How To Upload Shell On Wordpress..!
Today i am Going To Show You How To Upload Shell On Wordpress..!
Easy way..!
1) Wordpress Site +Username +Password 2) MadSpot Security Team Shell
2) Login To Your Hacked Wordpress Site..!
3) Now Goto Theme Editor..!
3) Now Goto Theme Editor..!
---wp-admin/theme-editor.php
4) On Your Right Side..Choose 404.php
5) Edit it And Paste Your Madspot Shell Code in 404.php nd Save it..!
6) Now, You Will See Some Thing Like :
---- /home/Themename/public_html/wp-content/themes/themename/404.php&theme=themename&a=te&scrollto=0
7) Now Delete Every Thing Before /wp-content/ and every thing after 404.php...!
4) On Your Right Side..Choose 404.php
5) Edit it And Paste Your Madspot Shell Code in 404.php nd Save it..!
6) Now, You Will See Some Thing Like :
---- /home/Themename/public_html/wp-content/themes/themename/404.php&theme=themename&a=te&scrollto=0
7) Now Delete Every Thing Before /wp-content/ and every thing after 404.php...!
8) URl Will Be www.site.com/wp-content/themes/themename/404.php
9) Now Press Enter and Shell Execute
Note: This Is Just For Educational Purpose Only..!
This Post Is Written By MANZOOR ALI
Enjoy......!
Enjoy......!
SQL Injection
Hack Website SQL Injection Tutorial in Urdu
STEP 1: Sub Se Pehle Apko Ek Site Chahye Jis Ko Ap Ne Hack Karna Hain Is Dork List Ko Download Keren Here Aur Koi Bhi Dork Copy Kar Kay Google Mein Paste Kar Dain,Us Kay Bad Kafi Sites Show Hon Gi Aap Check Karte Jaye Konsi SQL Valn Hein
For example: Mere Pass Ye Site Hain www.Abc.org.in So Ab Hamare Pass Site Hain Jis Ko Hum Ne Hack Karna Hain,
For example: Mere Pass Ye Site Hain www.Abc.org.in So Ab Hamare Pass Site Hain Jis Ko Hum Ne Hack Karna Hain,
Ab 2 Problems Hain Kay Number 1 Admin Login Find Karna and Number 2 Admin Login Hack Karna,
Solution Of Problem No.1 Admin Find Karna:
STEP 1: Is Tool Ko Download Kar Le Click Here To Download
Is Ko Extract Karen Apni Hard Disk Mein Aur Install Keren Havij Tool Aur RUN Keren
Open Havij Or Click Keren Find Admin Par Or Nichey Box Mein Apni Site Ka Link Enter Keren and Click On Start Or Ye Apko Show kar De Ga www.Abc.org.in
Open Havij Or Click Keren Find Admin Par Or Nichey Box Mein Apni Site Ka Link Enter Keren and Click On Start Or Ye Apko Show kar De Ga www.Abc.org.in
So Hamari Pehli Problem Ka Solution Mil Gaya Kay Admin Kese Find Karna Hain Ab Problem Number 2 Kay Admin Panel Hack Kese Karna Hain
2 Ways Hein Admin Login Hack Karne Kay SQL Mathod Mein Ek Havij Hein Aur 2nd SQL Querioes
2 Ways Hein Admin Login Hack Karne Kay SQL Mathod Mein Ek Havij Hein Aur 2nd SQL Querioes
SQL Quesries List Download Keren Click Here
Apne Net Browser Mein Jaye Aur Admin Login Open Keren User Name Ki Jaga Admin Type Keren Password Ki Jaga Bhi Admin Type Keren Agar Access Na Howa Tu Password Ki Jaga 1'or'1'='1 Ye Type Keren
Apne Net Browser Mein Jaye Aur Admin Login Open Keren User Name Ki Jaga Admin Type Keren Password Ki Jaga Bhi Admin Type Keren Agar Access Na Howa Tu Password Ki Jaga 1'or'1'='1 Ye Type Keren
So User : admin
Password : 1'or'1'='1
Aur Login Success
Thats it Dosto Apni Har Site Kay Admin Login Mein Ye Enter Kar Kay Check Kar Len...!
Enjoy..!
0 comments:
Post a Comment
THanks U Fore Comment
Please Waite Will Your
Comment Approved