Monday 26 September 2011

How To Hack A Web With IIS Exploit [Tutorial] ( For Window xp )

In IIS Exploit we can upload the Defaced page on the Vulnerable Server without any Login. It is most Easiest  way to Hack any site.

STEP 1: Click on Start button and open "RUN".






STEP 2: Now Type  this in RUN

%WINDIR%\EXPLORER.EXE ,::{20D04FE0-3AEA-1069-A2D8-08002B30309D}\::{BDEADF00-C265-11d0-BCED-00A0C90AB50F}



Now A Folder named "Web Folders" will open.


STEP 3: Now "Right-Click" in the folder and Goto "New" and then "Web Folder".



STEP 4: Now type the name of the Vulnerable site in this. e.g." http://autoqingdao.com/ " and click "Next".


STEP 5: Now Click on "Finish"




STEP 6: Now the folder will appear. You can open it and put any deface page or anything.





STEP 7: I put  text file in that folder. Named "securityalert.txt" (you can put a shell or HTML file also). If the file appear in the folder then the Hack is successful but if it don't then the site is not Vulnerable.


Now to view the uploaded site i will go to "http://autoqingdao.com/securityalert.txt"
In your case it will be " www.[sitename].com/[file name that you uploaded] "

http://91shengdian.com/
http://admella.org.au/
http://byerdental.com/
http://ccteam.org/
dedicated-servers-host.com
ewu-2.com
fordmanuals.com
freedownload-360.com
fromdesign.net
gratismp3musik.com
ibdco.co.in
idoubao.com
jax.yb.gov.cn
qd15.net
shhfgl.tzsb.cn
stb.mjpru.ac.in
stonespub.com.au
thienly.vn
tieuhocdongphu.edu.vn
whst1998.tzsb.cn
www.ajaymetachem.com
www.arizonahost.com
www.bdktv.com
www.bix.bh
www.cibits.com
www.csscsystems.com
http://lumjsoft.com/ 
http://coachcall.com.cn/ 
http://shanzhaipc.org/ 
http://dataio.com/ 
http://gogou.org/ 
http://huhao.org/ 
http://zgxlzxw.com/ 
http://blsfw.com/ 
http://byerdental.com/ 
http://cibits.com/ 
http://315pu.com/ 
http://250360.com/ 
http://aspirantsouls.com/ 
http://authorswritenow.com/ 
http://bjname.com/ 
http://yjwz.cn/
www.cyqxj.com
www.hi3j.com
www.esneh.com
www.esguolu.com
www.duanxinsms.net
www.dspenglian.com
www.dabaozang.com
www.cytsgx.com
www.hljycm.com

www.huhao.org

www.jxkarei.com
www.ltjcy.gov.cn
www.neostarinfra.com
www.quangbinh-eza.gov.vn
www.safetyinspector.buildsafer.com
xyyjy.org
www.zcky.com

0 comments: