Hack Websites using IIS (Internet Information Services) Exploit.

NOTE : This Post is only for Educational Purposes.This is to make Site Owners aware of the consequences of leaving their sites vulnerable to the IIS exploit and to teach them How to Fix it.

Hello Friends,
                     Today I'll tell you about How to Hack Websites Using IIS (Internet Information Services) Exploit.So,First I'll like to explain to you all that "What is IIS?" ; "What is IIS Exploit?" ; "What can you do with IIS Exploit?" ; "What Countermeasures you should take?" and much more.
So lets get started.

What is IIS?
Internet Information Services (IIS) – formerly called Internet Information Server – is a web server application and set of feature extension modules created by Microsoft for use with Microsoft Windows.

What is IIS Exploit?
IIS Exploit simply means remote system exploit.Through this exploit,we can connect to a site's database which is hosted on a Microsoft IIS Server without the need of any kind of authorization.IIS Exploit  is said to be the most easiest and quickest method of hacking a site.

What can you do with IIS Exploit?
We can insert a Deface Page so that every person visiting that site comes to know that you've hacked this site.If you want to get the site's files,then you can insert your Shell into the site and get the files.Even edit or delete any file from the server.Create a Mass Deface.

What Countermeasures you should take?
Before carrying out this operation,be sure that you have a VPN or a Proxy and that it is turned "ON" so that while uploading your shell or deface page,you cannot be tracked by anyone.After your work is finished,be sure to "DELETE" your shell (In case if you've uploaded any).The most important safety measure is- "Never tell anyone that you are doing any kind of hacking or tell him what site you are hacking"

What things are needed for carrying out IIS Exploit?
You need the following things for hacking a Website through IIS Exploit-

1. Website hosted on "Microsoft IIS Server".2. Computer running "Microsoft Windows 7".3. Shell (ASP).4. Deface Page.5. VPN or Proxy.
So,Lets get started.
STEP 01 :-Find the Target Website which you are going to hack(The site must be hosted on a Microsoft IIS Server). 

STEP 02 :-Make sure that your VPN or Proxy is connected and you can surf the Web anonymously.You can find a List of VPNs and Proxies Here.

STEP 03 :-
Open My Computer and right click to see the context menu,Select the 8th Option which is "Add a Network Location".

Click the Photo to Enlarge.

STEP 04 :-
"Add a Network Location Wizard" will open,Click next.

Click Photo to Enlarge.

STEP 05 :-

Next dialogue box will ask you where do you want to create this network location.Click Next. 

Click Photo to Enlarge.

STEP 06 :-

Now,It'll ask you to enter your site's name,Enter the site name and Click Next.

Click the Photo to Enlarge.

STEP 07 :-Now,It'll ask you what do you want to name this location,For better remembering,I suggest let it be the default which Windows suggests.Click Next.

Click the Photo to Enlarge.

STEP 08 :-

Now,it'll display that you've successfully created the network location.Put a Check Mark on the option which says "Open this Network Location when I click FINISH."Now click Finish.

Click the Photo to Enlarge.

STEP 09 :-

Now,Your Network Location's window will open.Just Copy and Paste your Shell (ASP) or deface page to the window.You can download ASP Shell Here.

Click Photo to Enlarge.

STEP 10 :-
Now,to access your shell or to see your Deface Page,just open your browser and type the site name and your shell name of deface page name like this-

Shell-

http://www.site.com/shell.asp;.jpg
(Where Site.com is your site and Shell.asp; is the name of your shell)

Deface Page-
http://www.site.com/deface-page.html
(Where Site.com is your site and Deface-page.html is the name of your deface page)

And then you can see your deface page or shell.

How to Fix this Vulnerability in your site?
This exploit only affects Microsoft IIS Versions of 5.0 (Windows 2000),5.1 (Windows XP) and 6.0 (Windows Server 2003).The Versions 7.0 or later which come with Windows Vista/Server 2008/7 are not vulnerable.So,to fix this vulnerability,just upgrade your Microsoft IIS Version from any older to 7.0 or higher.

Once Again,I am reminding to you all that this tutorial is only to make site owners aware of the consequences of leaving their site vulnerable to the Microsoft IIS Exploit.This is not intended for teaching hackers.

-KANISHK SINGH

Read more

List of Good VPNs and Proxies for You.

NOTE:This Post is only for Educational purposes.It is not intended for Hackers to make use of them or to help them by suggesting these ways.I in no way encourage Hackers or Hacking.

Hello Friends,
                     Today,I'll tell you about Using Proxies and VPNs to surf on the Internet safely.If you people are for the first time hearing about this,I'll tell you What is a VPN/Proxy?What are their uses? And How do they work?

What is a Proxy/VPN?
A virtual private network (VPN) is a technology for using the Internet or another intermediate network to connect computers to isolated remote computer networks that would otherwise be inaccessible. A VPN provides security so that traffic sent through the VPN connection stays isolated from other computers on the intermediate network. VPNs can connect individual users to a remote network or connect multiple networks together.
Read More...

In computer networks, a proxy server is a server (a computer system or an application) that acts as an intermediary for requests from clients seeking resources from other servers. A client connects to the proxy server, requesting some service, such as a file, connection, web page, or other resource available from a different server. The proxy server evaluates the request as a way to simplify and control their complexity. Today, most proxies are web proxies, facilitating access to content on the World Wide Web.
Read More...

Now,There are certain uses for VPNs and Proxies.Like,Hackers use it,Normal People Use it.

                   Hackers use it for protection against getting their locations tracked.IP (Internet Protocol) Address can be used to track locations using highly advanced GPS (Global Positioning System) and they can get caught easily.But,if they use VPNs and Proxies,it hides their locations and therefore no one can track them.

                   Normal Computer Users use it for accessing blocked sites like PirateBay.Se and other sites which are oftentimes blocked by Local ISPs (Internet Service Providers) which happened recently in my Country (India).These Proxies help them because the Proxies and VPNs hide the Real IP Address of the Users and make it appear to the Web Sites as if they are of Other Country like USA/Europe or any other.Therefore,they are allowed access to the blocked sites easily.

______________________________________________________________________________________________

Working of a Proxy can be explained with the help of following diagram.

Communication between two computers (shown in grey) connected through a third computer (shown in red) acting as a proxy.

______________________________________________________________________________________________

Click Photo to Enlarge.

______________________________________________________________________________________________

Now,I think you all must have been knowing what a VPN and a Proxy is.So,Here is the List of them along with their download links.

1. Cyberghost.
2. TOR.
3. Hide-My-Ass.
4. proXPN.
5. VyprVPN.
6. WiTopia.

These are just some of them I listed above.There are actually many.But I listed the top ones.

I hope you find this post helpful and you enjoy it.


-KANISHK SINGH

Read more

Hack Website via DDN (Dot Net Nuke) Exploit.

Note: This tutorial is only for educational purposes and to make site owners aware of the consequences of leaving their site vulnerable to Dot Net Nuke Exploit.I myself do not encourage hacking in any way.

Hello Friends,
                     I am back on my blog after a month or two I think.I was away from the blog due to un-explainable reasons. Well,This time I'll discuss Web-Site Hack and Vulnerabilities.As this is the first time on my blog that you'll all be coming to know about Website Hacking,I would first like to explain to you all that what is site hacking basically and then what are vulnerabilities and much more.So Lets get started.

What is Web-Site Hacking?

Website Hacking is in simple words,Gaining access to a site's database without authorization which is also illegal.The site hacking can be done by finding vulnerabilities into your site's database or structure.The site can be vulnerable from various ways mostly to SQL (Structured Query Language) Injection.A hacker can find vulnerabilities with various Vulnerability Scanning Tools such as Acunetix.

What is a Vulnerability in the Web-Site?

A Vulnerability in other words,means Weakness of the site or the Weak Point in the site.A hacker uses some of the discovered vulnerabilities like SQL,DNN,Symlink,IIS,Various File Uploading Vulnerabilities and many more that you can't even think of.A Elite-Hacker can even discover new vulnerabilties in a site's structure by advanced means.

How to Fix Vulnerability in a Web-Site?

Well,If you really want to fix the vulnerability in your sites,then the best advise I can offer to you is hire a Ethical Hacker or a IT Technician.A Ethical Hacker or the IT Technician would obviously charge you but he'll even ensure you of 100% protection of the site from that specific vulnerability.Such type of Technicians can be even hired online.If you know a friend who is good at those things,then you might be lucky,you won't have to search for him.

Now,Coming to the Point of the Post,Today we'll Learn DNN Hacking or which is even called Portal Hacking.

Below is a small list of Things you'll need in order to hack a site-

1. The right Google Dork.

2. A piece of Javascript Code.

3. A ASP Shell.

4. Your Deface Page. (You might want to show the owner you hacked it,won't ya?)

Now,I'll explain you each Step.

STEP 01 :-
Open Google, type the below Line in it and Hit Enter.

Dork - 
01. inurl:/portals/0
02. inurl:/Providers/HtmlEditorProviders/Fck/fcklinkgallery.aspx

STEP 02:-
Put any one of them and you'll come across thousands of results.

Click Photo to Enlarge.

STEP 03:-
Now,Select anyone site and Click on it.When the Page loads,see the address bar.

NOTE: If you Used the first Dork,then you need to change the address of the site from 
"http://SITE.COM/portals/0/etc/etc"
to
"http://SITE.COM/Providers/HtmlEditorProviders/Fck/fcklinkgallery.aspx"

NOTE: If You used the Second Dork,then you need not to worry.

After changing the URL,You'll come across the Link Gallery of the site which looks like this-

Click the Photo to Enlarge.

NOTE: If you come across a page like the below one,then the site is not vulnerable-

Click the Photo to Enlarge.

STEP 04 :-
Now,By Default,the CHECK MARK of the Link Gallery will be on  "URL (A link to an External Resource)"

Put a Check Mark on the Third Option which is "File (A File on Your Site)"

Click Photo to Enlarge

STEP 05 :-Now,After checking the Third Option,Insert the Below Javascript Code into the address bar of your browser and hit enter.

Javascript : javascript:__doPostBack('ctlURL$cmdUpload','') 
Note: It is advised that while inserting the above javascript into the address bar of the browser, you TYPE OUT the word "javascript" and then copy the rest of the line which is "__doPostBack('ctlURL$cmdUpload','')" other wise you won't be successful.

STEP 06 :-
Now,After entering the Javascript, a "Upload" Button will come up in the Link Gallery.

Click the Photo to Enlarge.

Now,Browse for your shell in files and then click the "Upload Selected File" and Upload your Shell on the Site.

To Download the ASP Shell, Click Here.
Pass Word of the Compressed File is www.kanishksinghtechy.blogspot.in
STEP 07 :-Now,After the Upload is successful,to locate your uploaded file,Just follow the below small steps-

1. Open new tab in your browser,type the site address and add the Below piece of line and hit enter-

Line : /portals/0/shellname.asp;.jpg
Where shellname.asp; is the name of your Shell.

For Example :- http://www.site.com/portals/0/shellname.asp;.jpg

After the shell loads successfully,The page will look something like this-

Click the Photo to Enlarge.

STEP 08 :-
Now,If you want to Hack the Site,Click the " <DIR>.. " Button Till You see a ADMIN Directory.Now,Open it and look for files Like "Index.Htm ; Index.html ; Index.php ; Default.htm ; Default.html ; Default.php"
or any other.Click on them and their Codes will open in a New window,Simple Change those Codes with your Deface Page Codes.

How to Find Deface Page Codes?

To Find your Deface Page Codes,Simply Right-Click Open your Deface.Html file with Notepad and Copy all Codes and paste them in the Windows Which asks for HTML Codes.
You can get some Deface Pages online if you want to deface websites.I Hope You all Liked my post on DNN (Dot Net Nuke Exploit) Hacking.As you've learnt it now,You can even protect your sites against thi vulnerability.

NOTE: Once again a notice to you all that I'll not be held responsible in anyway if this exploit is used for illegal hacking.I myself do no encourage hacking in anyway. 

HOW DO I PROTECT MY SITE AGAINST THIS VULNERABILITY?

This vulnerability only presists in DNN version of v4.5.5 or lower.So Just Update it to higher version like v4.8.2 and Even change the Link of your Link Gallery from FCKlinkgallery to something Other.But please be aware,A Elite Hacker can even track your new Link Gallery Name by means of Footprinting.


-KANISHK SINGH

Read more