How To Hack Website By IIS Exploit

IIS Stand's For Internet Information Service. By Using This Method You Can Get Control On Those Site's Which Are Powered By IIS And You Can Upload Anything On IIS Powered Vulnerable Sites. Including Web Pages, Pictures And Your Deface Page Too. But After The Admin Of That Site Takes Notice Of This. Admin Can Remove Your Uploading's From His/Her Site. You Can Attack One Site Anytime And Can Upload Your Things Untill The Admin Dosen't Secure/Protect His/Her Site And Remove The Vulnerability From The Website. In This Tutorial, I Will Describe This Attack On Windows XP. So, Start Today's Tutorial.



First Of All You Have To Find Vulnerable Website. Which Is Vulnerable To IIS Attack. You Can Search In Google IIS Powered Site's. You Can Also Find Several IIS Vulnerable Website's On Google And Hacking Forum's.
Have Found Vulnerable Site?
Start It.

1. Go to Start. Opne Run.
2. Now Enter Following Code.

%WINDIR%\EXPLORER.EXE ,::{20D04FE0-3AEA-1069-A2D8-08002B30309D}\::{BDEADF00-C265-11d0-BCED-00A0C90AB50F}

Now a folder named "Web Folders" will appear.

3: Now Press Right Button Of Your Mouse In The Empty Space Of Folder And Go To New And Then Web Folder.
Now A Dialog Box Will Appear.
4. Now Type The Url Of Vulnerable Website. e.g http://www.vulnerablesite.com And Click On Next.
If The Entered Site Is Not Vulnerable You Will See An Error Message. In This Case You Have To Find Some Other Site. If You Got No Error After Entring Vulnerable Site And You Are Able To See Finish Button. In This Case, Your Site Is Vulnerable To IIS Attack.

5. Now Click On Finish Button.
6. Now In Web Folders You Can See A Newly Created Folder. Open That Folder And Put Anything You Want To Upload On Vulnerable Site. e.g Picture Or Deface Page.
7.  If The Putting File(Copying File Into That Folder) Is Done. Then Cheerz You Are Done. If Copying Is Not Done. Then Your Site Dosen't Allows You To Upload Anything. In This Case You Will Have To Find Another One Vulnerable Site.
Cheerz. You Are All Done Now.

In Order To View Your Upload's. You Will Have To Visit http://www.vulnerablesite.com/yourfilename
Note: Replace yourfilename With Your Uploaded File Name. Keep In Mind That Write Full File Name There To Visit Your Uploading's.
For Example: defacepage.html  -  yourpicture.jpeg

Subscribe & Keep In Touch For Learning More.
Have Any Question? Dont Hesitate.