Webdav

How To Deface A Website Using Webdav

Requirements
Rootkit

http://www . mediafire.com /download/ci5rhr0ib4ee8vs/ls-rootkit.rar (Password: mch)

Shell:

http:// www . mediafire . com /download/i5k4y486f418k72/Umer.asp%3B.rar

Procedure

• Open Rootkit.

https://fbcdn-sphotos-g-a.akamaihd.net/hphotos-ak-frc3/t31.0-8/q71/s720x720/1799872_741083965935986_734966383_o.jpg

• Click WebDav, and click Asp Shell Maker.

https://fbcdn-sphotos-g-a.akamaihd.net/hphotos-ak-frc3/t31.0-8/q71/s720x720/1799872_741083965935986_734966383_o.jpg

• Click Settings.

https://fbcdn-sphotos-d-a.akamaihd.net/hphotos-ak-prn2/t31.0-8/q71/s720x720/1890610_741083962602653_1545397909_o.jpg

• Click Load Shell from the file and open Umer.asp (the shell that you downloaded).

https://fbcdn-sphotos-a-a.akamaihd.net/hphotos-ak-ash3/t31.0-8/q71/s720x720/1801394_741082829269433_452663021_o.jpg

• Click Add Site then,put a vulnerable target inside the box.Then click Ok.

https://fbcdn-sphotos-c-a.akamaihd.net/hphotos-ak-prn1/t31.0-8/q71/s720x720/1015177_741082895936093_6699476_o.jpg

• Click Serang.

https://fbcdn-sphotos-e-a.akamaihd.net/hphotos-ak-ash3/t31.0-8/q71/s720x720/1421050_741082899269426_627500516_o.jpg

• Wait until it creates the shell in the website.

https://fbcdn-sphotos-e-a.akamaihd.net/hphotos-ak-ash3/t31.0-8/q71/s720x720/1421050_741082899269426_627500516_o.jpg

• Copy the link where the shell is created.

https://fbcdn-sphotos-f-a.akamaihd.net/hphotos-ak-prn2/t31.0-8/q71/s720x720/1799937_741082902602759_1665062036_o.jpg

• Open the link in your browser (The link will be like www.website.com/Hmei7.asp;.txt#)

https://fbcdn-sphotos-d-a.akamaihd.net/hphotos-ak-ash4/t31.0-8/q71/s720x720/1913494_741081319269584_368584819_o.jpg

• You will see a File Manager in that site.Look and click for Upload File.https://fbcdn-sphotos-g-a.akamaihd.net/hphotos-ak-frc1/t31.0-8/q71/s720x720/1961943_741081372602912_318529809_o.jpg

https://www.facebook.com/photo.php?fbid=741081372602912&set=pcb.542085799238640&type=1

• Upload your deface page (.html or .php file)

https://fbcdn-sphotos-f-a.akamaihd.net/hphotos-ak-prn2/t31.0-8/q71/s720x720/1655543_741081339269582_1132060315_o.jpg

• Go to the link where you uploaded your depace page.

       www.website.com/depacepage.html or www.webssite.com/depacepage.php

https://fbcdn-sphotos-b-a.akamaihd.net/hphotos-ak-ash3/t31.0-8/q71/s720x720/1015876_741081289269587_617048157_o.jpg

Note:

• You can add multiple sites by loading a .txt file containing a list of vulnerable sites.

• The list of the websites where you'd successfully created your shell is stored in a txt file inside the folder where the rootkit is located.