ASP Shell Remote File Upload Part 1 – Building a practice VM
ASP Shell Remote File Upload Part 1 – Building a practice VM Recently, while performing some tasks for a customer, I was able to flex my information gathering skills quite a lot. The ensuing bit of investigation (which we�ll discuss more in-depth in the next post) led to me discovering that a customer�s main public-facing web server contained a remote file upload vulnerability and that an attacker could gain shell access to that server (behind their firewall) in a single easy step. While it turned out this was very easy to investigate, identify the vulnerability and then exploit it, I realized that there aren�t a lot of tutorials out on the web to show in-depth or step-by-step what you can do with a remote file upload vulnerability. In addition to the fact that in-depth tutorials are not plentiful, there seem to be very few instruction sets on where to find shells and what to do with them once you�ve determined you can gain access. So, I set aside some time to put together a couple of ...