Re: Is there any known "escape shell" techniques on a IIS/ASP server ?
foofus_at_foofus.net
Date: 01/25/05
- Previous message: Frederic Charpentier: "Is there any known "escape shell" techniques on a IIS/ASP server ?"
- In reply to: Frederic Charpentier: "Is there any known "escape shell" techniques on a IIS/ASP server ?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Tue, 25 Jan 2005 14:27:08 -0600 To: pen-test@securityfocus.com
On Tue, Jan 25, 2005 at 05:50:54PM +0100, Frederic Charpentier wrote:
> The question is :
> - If I'am allowed to upload ASP programs on a IIS server, am I able to
> escape IIS to send commands to the system ?
Probably.
http://www.foofus.net/jmk/iis.html#_asp
--Foofus.
