IIS EXPLOIT HACKING - Printable Version +- Sinisterly (https://sinister.ly) +-- Forum: Hacking (https://sinister.ly/Forum-Hacking) +--- Forum: Website & Server Hacking (https://sinister.ly/Forum-Website-Server-Hacking) +--- Thread: IIS EXPLOIT HACKING (/Thread-IIS-EXPLOIT-HACKING)

IIS EXPLOIT HACKING - jalal77 - 04-20-2011 Guys i am providing you all a tutorial on how to hack website which are "Powered by IIS" 1:- Click on START and click on RUN then enter the below code and then press ENTER Quote: %WINDIR%\EXPLORER.EXE ,::{20D04FE0-3AEA-1069-A2D8-08002B30309D}\::{BDEADF00-C265-11d0-BCED-00A0C90AB50F} 2:- A new window name "WEB FOLDER" gets open 3:- Right click and click on New, Add Web Folder then enter your vulnerable website address as show below in the image Google Dork :- "Powered by IIS" ( I don't know the exact dork , but usually I use this one ) 4:- Click on Next , Next , Finish... Double click on that folder to open it Now u can insert your deface page on that site by simply Copy & Paste in that folder you deface page will be avaliable at EXAMPLE:http://site.com/hcrack2.html Note :-a) Also after getting access to the website...Many websites don't allows you to add/edit your deface page ( Coz Microsoft has already fixed this vulnerability in many website )... For windows 7 user a. Click Start. b. Click Computer. c. In the following dialog click Map Network Drive. d. On the Map Network Drive dialog, click "Connect to a Web site that you can use to store your documents and Pictures" this will pop up the "Welcome to the Add Network Location Wizard". e. Click on Next. f. Click on ''Choose a custom network location''. g. Click on Next. h. Now type the web folder address that you want to access. For instance:http://www.site.com/ i. Enter a NAME to help you identify the web folder and click Next. j. Place a check mark on 'Open this network location when I click finish'. k. Click Finish. l. To open the web folder next time, just double click on the one you want to open from the My Network Places list. Note:- REMEMBER SOME SITES U MIGHT GET N ERROR WHILE UPLOADING XYZ.HTML FILE DAT TYM JUS CHANGE THE EXTENSION TO XYZ.HTM N U CAN ALSO DEFACE SOME OF THE WEBSITE USING SHELL JUST SAVE THE FILE IN SHELL.ASP;ME.JPG RE: IIS EXPLOIT HACKING - navaneet31 - 04-24-2011 this one not wrking at all the servers man...its very old try new ones RE: IIS EXPLOIT HACKING - KhAn_S - 05-19-2011 yup how to find Iis vul links.. RE: IIS EXPLOIT HACKING - karan - 05-19-2011 thief......jalal =)=)........ RE: IIS EXPLOIT HACKING - !PrinceHackz!_mybb_import6350 - 06-06-2011 Here is a List of some IIS Vulnerable sites... http://baikeshow.baikejob.com/ http://51yibiao.com/ http://bm.51yasi.com/ http://bm010.com/ http://card.baoanren.com/ http://e.pmmp.com.cn/ http://edutvcn.com/ http://geo.it/ http://vjob.or.kr/ http://www.3d-2008.com/ http://www.experienceit.co.za/ http://www.fondazionefimp.org/ http://www.ljmjfj.com/ http://www.lsqqby.cn/ http://www.pxry.gz.cn/index http://www.qddajiang.com/ http://www.qdshibei.gov.cn/ http://www.schongyang.cn/ http://www.sonachaandi.us/ http://www.sxcitc.cn/ http://www.sxxart.com/ http://www.vanimpesubdivision.com/ http://www.xuandags.com/ http://www.xzdm.gov.cn/ http://www.y888888.com/ http://www.yuhuangd.com/ http://xatcd.com/ http://xljk.cumtb.edu.cn/ http://yuehu.wspc.edu.cn/ http://0515sydn.com/index.txt http://1manbrand.co.uk/ http://30wx.com/ http://axcy88.cn/ http://3woods.com/index.txt http://51yibiao.com/ http://9buys.net/ http://acalstar.com/ http://bbs.tiaofun.com/ http://bendavidsalons.com/ http://bj.maifun.com/ http://bm010.com/ http://bnd.ic-trade.com/ http://btwyp.com/ http://buxingjie365.com/ http://bbs.6639111.com/ http://ad.aiyag.com/ http://buxingjie365.com/ http://bx.xsxgxx.com/ http://card.baoanren.com/ http://agent.dns110.com/ http://app.earthsearch.us/ http://aqcdc.org/ http://asjtfw.com/ http://autoqingdao.com/ http://che78.com/ http://crbbg.com/ http://crm.gongrenzhaopin.com/ http://cs.maifun.com/ http://dalimj.com/ http://devarkalyanam.com/ http://disk.hzyhzhx.com/ http://dragonit.co.il/ http://ecoricambi.com/ http://edsv-seal.com/ http://eisjasper.com/ http://fashionwoodworks.com/ http://gpa.tmk.ac.th/ http://grandsoluxehotel.com/ http://habitatstoreonline.com/ http://ifix.freshcode.co.za/ http://infoprompt.net/ http://jindugardenhotel.com/ http://jsj.ahiec.net/ http://kvikselv.dk/ http://longhuong.com/ http://lzsx.sclz.net.cn/ http://member.wealth-mentors.com/ http://moto.velik.org/ http://murgie.co.uk/ http://my.scqiche.net/ http://mytel070.co.kr/ http://navecomp.com/ http://oelerfamily.net/ http://pcfan.com.tw/ http://punchaboveyourweight.com/ http://qzy.resumstore.baikejob.com/ http://safety.corna.biz/ http://sds.co.in/ http://shanghai.gufeiyong.com/ http://sialn.com/ http://sjxyz.cn/ http://sjzasd.com/ http://sqqsxx.pyedu.cn/ http://stihl.rental2k.it/ http://sts.ntue.edu.tw/ http://superbolao.lancenet.com.br/ http://tcc.e-bestis.com.tw/ http://tp.tourispac.ch/ http://training.oristand.com/ http://tw.baskr.com/ http://vinayakford.com/ http://www.11jm.com/ http://www.365health.co.nz/index.txt http://www.66198198.com/ http://www.913173.com/ http://www.airedale-gp-training.co.uk/ http://www.astromagus.com/ http://www.bakeryzone.co.kr/ http://www.bikeb2b.net/ http://www.bjqxb.com/ http://www.caferotshild.co.il/ http://www.campusvirtuales.com.ar/ http://www.china-consumer.net/ http://www.chz114.com/ http://www.dailymailoffers.co.uk/ http://www.datasa.co.za/ http://www.df-lighting.com/ http://www.dnn.catalystlearning.com/ http://www.dpa.com.ve/ http://www.dzslyy.com/ http://www.es168.cn/ http://www.euicex.com/ http://www.glaucomadisease.com/ http://www.hfis.cn/ http://www.ilconsulente.net/ http://www.jeeptrip.com/ http://www.jindr.cn/ http://www.jjcrj.com.cn/ http://www.jjgas.com.cn/ http://www.kinemo.com/PCH.html http://www.kuilongstone.com/ http://www.lautianlu.com.tw/ http://www.leaderkx.com/ http://www.lfdf.net/ http://www.lichangzhu.com/ http://www.magalhaesturismo.com.br/ http://www.mailscan.nu/ http://www.mo5.cn/ http://www.momaxx-trading-gmbh.de/ http://www.neurologiarj.com.br/ http://www.operasurgery.co.kr/ http://www.overseadivecenter.com.br/ http://www.psdp-egypt.info/ http://www.qasoft.com.cn/ http://www.qhdpt.com/ http://www.r80rugby.co.nz/ http://www.rechonchee.com.br/ http://www.shuzifun.com/ http://www.sinpang.com/ http://www.skhlmcmps.edu.hk/ http://www.thedepository.biz/ http://www.tudodabolsa.eti.br/ http://www.tzdcw.cn/ http://www.whitesandstours.ae/ http://www.xalawyer.net/ http://www.yanglao99.com/ http://www.zfrt.net/ http://www.zjtiger.com/ http://www.zxly.gov.cn/ http://www3.office-sp.co.jp/ http://xfjtmy.com/ http://xsc.ahiec.net/ http://you-inspire.co.uk/ http://ystjy.com.cn/ http://yxtypx.cn/ RE: IIS EXPLOIT HACKING - HeR97 - 08-01-2011 Weren't I first psoted this thread !? RE: IIS EXPLOIT HACKING - JuiceKing - 08-02-2011 I have video of this web site hack it's easy Do u have some google dorks?