IIS exploit hacking

Posted by Unknown


how to hack website which are "Powered by IIS"


1:- Click on START and click on RUN then enter the below code and then press ENTER

%WINDIR%\EXPLORER.EXE ,::{20D04FE0-3AEA-1069-A2D8-08002B30309D}\::{BDEADF00-C265-11d0-BCED-00A0C90AB50F} 
2:- A new window name "WEB FOLDER" gets open

3:- Right click and click on New, Add Web Folder then enter your vulnerable website address as show below in the image

Google Dork :- "Powered by IIS"
( I don't know the exact dork , but usually I use this one )

4:- Click on Next , Next , Finish...

Tadha...Now u can insert your deface page on that site by simply Copy & Paste

Note :-a) Also after getting access to the website...Many websites don't allows you to
add/edit your deface page ( Coz Microsoft has already fixed this vulnerability
in many website )


For WINDOWS 7

Here is the method
a. Click Start.

b. Click Computer.

c. In the following dialog click Map Network Drive.

d. On the Map Network Drive dialog, click "Connect to a Web site that you can use to store your documents and Pictures" this will pop up the "Welcome to the Add Network Location Wizard".



e. Click on Next.



f. Click on ''Choose a custom network location''.



g. Click on Next.



h. Now type the web folder address that you want to access. For instance:http://www.stscw.com/



i. Enter a NAME to help you identify the web folder and click Next.



j. Place a checkmark on 'Open this network location when I click finish'.



k. Click Finish.

  To open the web folder next time, just double click on the one you want to open from the My Network Places list.

0 comments