Wednesday, May 18, 2016

How to IIS websites : The Most siest way of Website



InInternet Information Server website we can upload the Defaced page on the Vulnerable Server without any User Name or . It is most siest way toWebsite .


STEP 1:Click on Start button and open "RUN".STEP 2:Now Type this in RUN%WINDIR%\EXPLORER.EXE ,::{20D04FE0-3A-1069-A2D8-08002B30309D}\::{BDDF00-C265-11d0-BCED-00A0C90AB50F}Now A Folder named "Web Folders" will open.


STEP 3:Now "Right-Click" in the folder and Goto "New" and then "Web Folder".

STEP 4:Now type the name of the Vulnerable site in this. e.g."http://autoqingdao.com/ " and click "Next".
STEP 5:Now Click on "Finish"STEP 6:Now the folder will appr. You can open it and put any deface page or anything.STEP 7:I put text file in that folder. Named "securityalert.txt" (you can put a shell or HTML file also). If the file appr in the folder then theis successful but if it don't then the site is not Vulnerable..Now to view the uploaded site i will go to "http://autoqingdao.com/securityalert.txt"
In your case it will be " www.[sitename].com/[file name that you uploaded] "

SomeIIS Websites For Practise
http://pastebin.com/NZHwmUy5

No comments:

Post a Comment