Skip to main content

Hacking DNN Based Web Sites



Hacking DNN Based Web Sites

Hacking DNN Based Web Sites


Hacking DNN (Dot Net Nuke) CMS based websites is based on the Security Loop Hole in the CMS. For using that exploit we will see the few mentioned points which illustrates us on how to hack any live site based on Dot Net Nuke CMS.

Vulnerability : This is the know Vulnerability in Dot Net Nuke (DNN) CMS. This allows aone user to Upload a File/Shell Remotely to hack that Site which is running on Dot Net Nuke CMS. The Link's for more Information regarding this Vulnerability is mentioned below -
                                http://www.exploit-db.com/exploits/12700/

Getting Started : Here we will use the Google Dork to trace the sites that are using DNN (Dot Net Nuke) CMS and are vulnerable to Remote File Upload.

How To Do It : Here, I an mentioning the few points on how to Search for the existing Vulnerability in DNN.



Let's Begin with the Tutorial...

Step 1. Go To http://www.google.com

Step 2. Now Enter this Dork -  :inurl:/tabid/36/language/en-US/Default.aspx

Now you will see the following as mentioned in the below Image -


The above Dork is used for tracing the sites running on the Dot Net Nuke CMS and will provide us the URL which are Vulnerable and which can be manipulated further to Upload Files Remotely.



Step 4. Now we will take an example of the Site Running on DNN which is -  http://www.xyz.com/


Note : For Security Reasons the above domain name cannot be made Public whose Page you are seeing above.

Step 5. Now as we have the above website as Vulnerable and via Google Dork we have also traced the Vulnerable URL in the site and hence before manipulating the same, I will show you in below Image as how does it looks like -

URL Used Is - http://www.xyz.com/Home/tabid/36/Language/en-US/Default.aspx



Step 6. Once we have traced the Vulnerable Site along with the concerned URL. Here is the time to Replace the Above URL with the Vulnerable one.  As mentioned below -

URL To Replace - http://www.xyz.com/Providers/HtmlEditorProviders/Fck/fcklinkgallery.aspx

Refer the Image as shown below -


Step 7. From the above Step 6 we can understand that we have now got a GUI Interface to Upload A File Remotely. Now replace the whole URL of the above mentioned Image with a JavaScript code. This JavaScript Code will provide us an Interface and will help us to upload any allowed file formats.

JavaScript Code Is - javascript:__doPostBack('ctlURL$cmdUpload','')

Refer the Image below -


From the above Image we can see that we have now a GUI Intreface. Here in that we need to select the radio button where the File is mentioned and make sure as File Locations: you select Root.

Step 8. Once this is all set then Browse and Upload the File which you want to that can be any Shell Code like c99, c100, r57 etc to hack that Site or to Deface that Site.

Step 9. Now you can view your file/shell which you have uploaded at portals/0/uploadedfile.fileformat

Step 10. When you get Permission Issues then set a filter to the Uploader so that you can just upload .jpeg/.jpg/.txt files. Now To Bypass this filter just rename the shell to shell.php;.txt or shell.php;.jpg or any other extension which is allowed.

This way you can Parse the request for the Page/Shell in the Browser and it will read upto .php only. It will not read .txt as ";" sign ends the request. That's It and Now You Are Done..  :)

                                      "KEEP CALM AND STAY AWAKE"









FEED



Share










SUPPORT


View Rohit Patel's profile on LinkedIn









VISIT COUNTER !!






ROHIT PATEL
 

Comments

Popular posts from this blog

Defacing Sites via HTML Injections (XSS)

Defacing Sites via HTML Injections Defacing Sites via HTML Injections What Is HTML Injection: "HTML Injection" is called as the Virtual Defacement Technique and also known as the "XSS" Cross Site Scripting. It is a very common vulnerability found when searched for most of the domains. This kind of a Vulnerability allows an "Attacker" to Inject some code into the applications affected in order to bypass access to the "Website" or to Infect any particular Page in that "Website". HTML injections = Cross Site Scripting, It is a Security Vulnerability in most of the sites, that allows an Attacker to Inject HTML Code into the Web Pages that are viewed by other users. XSS Attacks are essentially code injection attacks into the various interpreters in the browser. These attacks can be carried out using HTML, JavaScript, VBScript, ActiveX, Flash and other clinet side Languages. Well crafted Malicious Code can even hep the &qu

EKS Cluster and Create CSI Driver to store credentials in AWS Secrets Manager via SecretProviderClass

EKS Cluster | CSI Driver | SecretProviderClass | AWS Secrets Manager Setup EKS Cluster and Manage Credentials at runtime using CSI driver using SecretProviderClass and Secrets Manager Assuming you have Configured/Installed AWS CLI, EKSCTL, KUBECTL, HELM. CSI Basic Information: CSI (Container Storage Interface) widely used as a Storage Technology. Created by Google | Mesosphere | Docker.  It has two two Plugins one runs on the Master Node (Centralized Controller Plugin) and another one on Worker Nodes (Decentralized headless Node Plugin).  CSI communication protocol is gRPC.   The communication between Container Orchestration to Controller Plugin (Master) and to Node Plugin (Worker Node) happens using gRPC .  CSI Drivers : vendor specific compiled into Kubernetes/openshift binaries. To use a CSI driver, a StorageClass needs to be assigned first.  The CSI driver is then set as the Provisioner for the Storage Class. CSI drivers provide three main services, which are: Identity |

Hacking via Cloning Site Using Kali Linux

Hacking via Cloning Site Using Kali Linux Hacking via Cloning Site Using Kali Linux  SET Attack Method : SET stands for Social Engineering Toolkist , primarily written by  David Kennedy . The Social-Engineer Toolkit (SET) is specifically designed to perform advanced attacks against the human element. SET was designed to be released with the  http://www.social-engineer.org  launch and has quickly became a standard tool in a penetration testers arsenal. The attacks built into the toolkit are designed to be targeted and focused attacks against a person or organization used during a penetration test. Actually this hacking method will works perfectly with DNS spoofing or Man in the Middle Attack method. Here in this tutorial I’m only writing how-to and step-by-step to perform the basic attack , but for the rest you can modified it with your own imagination. In this tutorial we will see how this attack methods can owned your computer in just a few steps. 1,  Cli