Today i will explain you how to hack & deface webdav sites.
Is really easy , and this tutorial will clearly show you how to do it.
Please don't flame me for my bad English. Feel free to ask here if you do not understand something.
Let's start...
Open up the '
Map Network Drive'
- Windows XP : Right click on My Computer
- Windows 7 : Click the start bar
[You must be registered and logged in to see this image.]Now it will show a new little window.
Click on '
Sign up for online storage of conect to a network server'
[You must be registered and logged in to see this image.]A new window will show up , click next.
[You must be registered and logged in to see this image.]Again click next.
[You must be registered and logged in to see this image.]Now here type in the server's IP or domain that has WebDav enabled.
Ensure to put
[You must be registered and logged in to see this link.] in the webdav's directory. Otherwise it may not work. Then click next. (Sample site:
[You must be registered and logged in to see this link.]Then Click Next.
[You must be registered and logged in to see this image.]As you can see at the next window you can choose whatever you want. But i prefer leaving it's default name. It's not important. Then click Next again.
[You must be registered and logged in to see this image.]Here is the last window , be sure to
tick the checkbox '
Open this network place when I click Finish.'
And click Finish !
[You must be registered and logged in to see this image.]As you can see we're already inside the website now. You can put your deface page there. (format: .html ,.htm) it depends on server because sometimes you can put .asp or .php
So that's it , hope you enjoyed and learned something useful from my tutorial.
Here's my Sample:
[You must be registered and logged in to see this link.]Webdav Vulnerable sites:
- Code:
-
http://pastebin.com/nbLdw7cF
