WebApp Sec mailing list archives

Re: .asp giving 404


From: Robin Wood <robin () digininja org>
Date: Wed, 13 Apr 2011 17:44:12 +0100

On 12 April 2011 17:59, Robin Wood <robin () digininja org> wrote:
On a recent test I got FTP write access to a web server which had an
ASP based site on it. I uploaded an ASP shell and tried to browse to
it but got a 404. I uploaded it to a directory that had directory
listing enabled and confirmed the file was there but again browsing to
it gave a 404.

Just going to repeat the point, there was an ASP based site already
running so I know that ASP was setup correctly, the problem was the
.asp files I was uploading were being shown as 404's not plain text
and not parsed as script.

Robin


I uploaded a text file and image and could browse to both of those fine.

I also tried downloading an existing page and modifying that then
re-uploading it but didn't have permission to overwrite the file.

I vaguely remember something to do with file permissions having to be
set correctly for ASP to run from years ago when I did some dev work
in it but can't remember. Can someone tell me what was likely to have
been going on and if there is any way around it given the access I
had?

Robin




This list is sponsored by Cenzic
--------------------------------------
Let Us Hack You. Before Hackers Do!
It's Finally Here - The Cenzic Website HealthCheck. FREE.
Request Yours Now! 
http://www.cenzic.com/2009HClaunch_Securityfocus
--------------------------------------


Current thread: