Re: ASP Files

From: Javier Fernández-Sanguino Peña (jfernandez@germinus.com)
Date: 12/10/02

  • Next message: Stephen Friedl: "Re: remote MAC address discovery?"
    Date: Tue, 10 Dec 2002 19:14:49 +0100
    From: Javier Fernández-Sanguino Peña <jfernandez@germinus.com>
    To: Ian Lyte <ilyte@alias666.freeserve.co.uk>
    
    
    

    Ian Lyte wrote:

    >Hi All,
    >
    > I'm looking for some sample .asp / .php files (preferably some captured
    >from honeypots if at all possible) that are currently being uploaded on
    >compromised systems.
    >
    >
    Well, this one was not captured from a honeypot, it's based on one
    published over there (in this same list and many other places) with some
    minor changes by me. I guess the original one is
    http://www.securiteam.com/tools/CmdAsp_asp_checks_your_last_line_of_defense.html

    Regards

    Javi

    PS: Try google to find more references to this one.

    
    
    

    ----------------------------------------------------------------------------
    This list is provided by the SecurityFocus Security Intelligence Alert (SIA)
    Service. For more information on SecurityFocus' SIA service which
    automatically alerts you to the latest security vulnerabilities please see:
    https://alerts.securityfocus.com/




    Relevant Pages

    • Re: faster scans? (nmap)
      ... one host using nmap for syn scans in burst mode with the ... >>>This list is provided by the SecurityFocus Security Intelligence Alert ... For more information on SecurityFocus' SIA service which ...
      (Pen-Test)
    • Re: pen test help please asap
      ... > Machine A on client site makes a configurable encrypted OUTBOUND ... > This list is provided by the SecurityFocus Security Intelligence Alert ... For more information on SecurityFocus' SIA service which ... This list is provided by the SecurityFocus Security Intelligence Alert ...
      (Pen-Test)
    • Re: ettercap help
      ... Anyways have never tried Ettercap for VNC. ... > This list is provided by the SecurityFocus Security Intelligence Alert ... For more information on SecurityFocus' SIA service which ... This list is provided by the SecurityFocus Security Intelligence Alert ...
      (Pen-Test)
    • RE: CFM SQL injection
      ... You should better use union or alike get unauthorized data from the ... This list is provided by the SecurityFocus Security Intelligence Alert ... For more information on SecurityFocus' SIA service which ...
      (Pen-Test)
    • Re: ettercap help
      ... > I can get it to sniff telnet, ftp, pop, smb, but no vnc. ... > This list is provided by the SecurityFocus Security Intelligence Alert ... For more information on SecurityFocus' SIA service which ...
      (Pen-Test)