hacking contest

hacking exploits security forum
hacking
compliance articles
upgrade backup exec
information security consultant

Full Version: File Uploads To Winnt
kostenix
what kind of file upload programs are imigrated into winnt?

i know tftp and ftp .. but this can't be all i think

anyone knows other methods?

pls answer
G-Ryder
couple ways to try... using TS to login and then use IE to download from http... requires a user and pass though.. connecting to it with netbios and dragging the files over from ur hdd.. wont always work though.. prolly some others, I just can't think of any at this moment.. oh yeah... there is that upload asp script.. echo it onto their system and if they have a webserver enabled u could upload that way...
fluffibunni
read some manual it is not to hard
what can you do can you type your name on computer
kostenix
what do you mean with "can you write your name on computer" ?

i only have the chance to use SQLExec commands ... there are no other rights on the server ..

there is no ftp.exe and no tftp.exe ... i cant add shares , start or stop services, modify users...

i only have the sqlexec... maybe there are some different ways to copy my files on it?
hermel
Try to install a trojaner and so you can upload and execute your files.
kostenix
how can i install a trojaner if i have no chance to upload it?

as i said there is no ftp.exe and no tftp.exe ... and other services like netbios, rpc, terminal service or something else isnt running... and i have no rights to start them ...

is there an other .exe which could let me upload files on the server?
Grinler
Try the rcp command.
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.

 
Invision Power Board © 2001-2005 Invision Power Services, Inc.