IIS Exploit - Easiest way to deface Website [Windows XP]

In IIS Exploit we can upload shells, Defaced page or anything you like on the Vulnerable Server without any Login. It is most Easiest  way to Hack any site.

STEP 1: Click on Start button and open "RUN".

STEP 2: Now Type  this in RUN

%WINDIR%\EXPLORER.EXE ,::{20D04FE0-3AEA-1069-A2D8-08002B30309D}\::{BDEADF00-C265-11d0-BCED-00A0C90AB50F}

Now A Folder named "Web Folders" will open.


STEP 3: Now "Right-Click" in the folder and Goto "New" and then "Web Folder".

STEP 4: Now type the name of the Vulnerable site in this. e.g." http://autoqingdao.com/ " and click "Next".

STEP 5: Now Click on "Finish"

STEP 6: Now the folder will appear. You can open it and put any deface page or anything.

STEP 7: I put  text file in that folder. Named "c99.php" (you can put a txt or HTML file also). If the file appear in the folder then the Hack is successful but if it don't then the site is not Vulnerable.

Now to view the uploaded site i will go to "http://autoqingdao.com/c99.php"
In your case it will be " www.[sitename].com/[file name that you uploaded] "

Some IIS Working Sites :
http://ayatolahkhamenae.parniansis.com/

http://bahadori1.parniansis.com/

http://beheshti.parniansis.com/

http://beheshti1.parniansis.com/

http://bentolhoda1.parniansis.com/

http://bitaraf.parniansis.com/

http://derakhshan.parniansis.com/

http://derakhshan1.parniansis.com/

http://derakhshan2.parniansis.com/

http://derakhshan3.parniansis.com/

http://ebnesina.parniansis.com/

http://emamali.parniansis.com/

http://emkhaleghiyeyzd.parniansis.com/

http://365tg.net/

http://8090gogo.com/

http://99zs.net/

http://bbs.365tg.net/

http://bbs.ttroad.com/

http://fyuser.fy768.com/

http://shop.365tg.net/

http://sys.lubooil.com/

http://tg.feitengcar.com/

http://www.365tg.net/

http://www.99zs.net/

http://www.fy768.com/

http://www.shop574.com/

http://www.ttroad.com/

http://hellen.9s6.com/

http://hanhua.9s6.com/

http://auditeur.lexbase.fr/

http://axoneservices.com/

http://armor.icor.fr/

http://perros-guirec.icor.fr/

http://yks.nsa.gov.cn/

http://asr123.com/

http://tjava.cn/

http://9m9n.com/

http://bbs.9m9n.com/

http://home.9m9n.com/

http://nvshengjie.com/

http://ribendm.com/

http://v.9m9n.com/

http://www.9m9n.cn/

http://www.9m9n.com/

http://www.litikb.com/

http://www.riben123.cn/

http://www.tluo.cn/

http://wut120.com/

http://www.hnstdz.com/

http://ahic.com.cn/

Note: It's Working for Windows XP only. IIS exploit for Windows 7 will be posted soon....