Hacking.BaBa

Blogger DNS 0day Vulnerability 2012 By Shadow008, Pakistani Hacker

<div dir="ltr" style="text-align: left;" trbidi="on"><div dir="ltr" style="text-align: left;" trbidi="on"><div style="text-align: center;">Blogger DNS 0day Vulnerability 2012</div><div style="text-align: center;"><img height="320" src="http://c4lpt.co.uk/Top100Tools/blogger.png" width="320" /> </div> [#] Author : Shadow008 [#] Reported On : <a href="http://thehackersmedia.blogspot.com/" target="_blank">The Hackers Media</a> [#] Country : Pakistani Hacker New BlogDNS 0day, Discovered By Shadow008 Lets just say, any site pointing to Google server can Be Hacked and Defaced 1st) Find a target where as its subdomain or its main domain is pointing to google or blogger server I.P 2nd) If it is pointing to Google Server I.P, You will see a page 100% like this >> http://ghs.google.com/ 404. That’s an error. The requested URL / was not found on this server. That’s all we know. If that shows, That means its vul to BlogDNS 0day 3rd) Go to http://www.blogger.com/ and Login / Create an account 4th) Create a Blog 5th) Name it anything you want as a subdomain for blogger. 6th) Once blog is created, Go to Settings > Publishing > Switch To Advanced Mod and add that site URL domain. (example:direct.madleets.com) Please note that it MUST be pointing to google or blogger server I.P. and Save it. Clear You cache and go to that sites subdomain which you added. You will see its in your control  . Now go to Design > Edit HTML > Revert to Classic Template > Add Deface Code There (Switch of Navbar to OFF) and Hit Save, Clear Cache and check site will be defaced  . Note: I have used Old Blogger Interface, I don't use the New Blogger Interface as I find the old one more easy I hope it was clear and understood Have fun and don't share Special Thanks To Shadow008 for all this Sites which are hacked using this method: <a href="http://direct.thehackernews.com/">http://direct.thehackernews.com/</a> Mirror: <a href="http://zone-h.org/mirror/id/18307796">http://zone-h.org/mirror/id/18307796</a> <a href="http://direct.pkhackerz.com/">http://direct.pkhackerz.com/</a> Mirror: <a href="http://zone-h.org/mirror/id/18307953">http://zone-h.org/mirror/id/18307953</a> <a href="http://mail.dl4hacks.net/">http://mail.dl4hacks.net/</a> Mirror: <a href="http://zone-hc.com/archive/mirror/8d752fd_mail.dl4hacks.net_mirror_.html">http://zone-hc.com/archive/mirror/8d752fd_mail.dl4hacks.net_mirror_.html</a> </div><a class="twitter-follow-button" data-show-count="false" href="https://twitter.com/thehackersmedia">Follow @thehackersmedia</a><script>!function(d,s,id){var js,fjs=d.getElementsByTagName(s)[0];if(!d.getElementById(id)){js=d.createElement(s);js.id=id;js.src="//platform.twitter.com/widgets.js";fjs.parentNode.insertBefore(js,fjs);}}(document,"script","twitter-wjs");</script></div>