Re: Is there any known "escape shell" techniques on a IIS/ASP server ?

From: foofus@foofus.net
Date: Tue Jan 25 2005 - 15:27:08 EST


On Tue, Jan 25, 2005 at 05:50:54PM +0100, Frederic Charpentier wrote:
> The question is :
> - If I'am allowed to upload ASP programs on a IIS server, am I able to
> escape IIS to send commands to the system ?

Probably.
http://www.foofus.net/jmk/iis.html#_asp

--Foofus.



This archive was generated by hypermail 2.1.7 : Sat Apr 12 2008 - 10:54:15 EDT