hi all,
i am able to run java scripts on a server.
now what else can be done using this.
all i have done so far is to get the cookie value of the session.
how can this cookie be used ??
thanks,
d3xt3r1ty

It depends what you want to do. I mean, if you've got full-blown scripting access then there's nothing stopping you from downloading, installing, and the running a backdoor program...

Post some more info, and we'll help out!

hi ,
yes i have full blown entry.
i can execute any script i want to .
but i dont have any script to run.
i am not sure of the capabilities of java script.
a good document on this would be a great help.
Thanks,
d3xt3r1ty

i´m also very interisting, i search only a small downloader. i have used a vb-script. but anti-virus detect the script. can anybody help us for some information

What vulnerability are you using that supposedly gives you full script access to the web server? If this is cross-site scripting, then you dont have the access you think you do.