Uploading Via .html File

GovernmentSecurity.org > System Security > Beginners Section

JDog45

Dec 13 2003, 08:34 PM

I remember seeing a post about how to upload files via making a .html or .asp file on the remote computer and executing it.. not too big on HTML so if anyone knows how it's done would you mind explaining to me please? In public or pm? Thanks

w00dy

Dec 13 2003, 11:10 PM

LAZYNESS. Lucky for you, today I am giving holiday gifts so i wont dump this thread.

HTML form for uploading up to 3 files, which also contains a text description field, and a multiple select control:

CODE

<HTML>
<BODY BGCOLOR="#FFFFFF">
<FORM METHOD="POST" ENCTYPE="multipart/form-data" ACTION="Upload.asp">
<INPUT TYPE=FILE NAME="FILE1"><BR>
<INPUT TYPE=FILE NAME="FILE2"><BR>
<INPUT TYPE=FILE NAME="FILE3"><BR>

<INPUT TYPE=TEXT NAME="DESCRIPTION"><BR>

<SELECT NAME="CATEGORY" MULTIPLE>
<OPTION>Image
<OPTION>Text
<OPTION>Source Code
<OPTION>Archive
</SELECT><BR>

<INPUT TYPE=SUBMIT VALUE="Upload!">
</FORM>
</BODY>
</HTML>

Corresponding Upload Script (Upload.asp):

CODE

<%
Set Upload = Server.CreateObject("Persits.Upload.1")

' Upload files
Upload.OverwriteFiles = False ' Generate unique names
Upload.SetMaxSize 1048576 ' Truncate files above 1MB
Upload.Save "c:\upload"

' Process all files received
For Each File in Upload.Files

' Save in the database as blob
File.ToDatabase "DSN=data;UID=sa;PWD=zzz;", _
"insert into mytable(blob) values(?)"

' Move to a different location
File.Copy "d:\archive\" & File.ExtractFileName
File.Delete
Next
' Display description field
Response.Write Upload.Form("Description") & "<BR>"

' Display all selected categories
For Each Item in Upload.Form
If Item.Name = "Category" Then
Response.Write Item.Value & "<BR>"
End If
Next
%>

G-Ryder

Dec 14 2003, 03:40 AM

maybe another way... post from a lil while ago..

http://www.governmentsecurity.org/forum/in...topic=4649&st=0

Helloman

Dec 14 2003, 10:58 AM

Thats really great .

Many THX

This is the best security related forum ever

woodpecker_sjtu

Dec 14 2003, 11:17 AM

MhtRedirLaunchInetExe-Demo.zip
google it!

lv4

Dec 14 2003, 11:41 PM

Great Job guys...

I use echo command for ftp but I don't know how to put like <html> to a file.txt for example.

Can anyone tell me how to echo characters like: +,<,> ???

Is there a wildcar or special symbol You gotta input before it??

I tried on (win98se) to do something like:

echo ^<html^> > c:\test.txt

and I get "File not found"

THX for Your help.

net_runner

Dec 17 2003, 03:09 AM

woodpecker_sjtu <--- your file sound very interesting, thanks for the info

esorone

Jan 1 2004, 09:21 PM

Jep fresh post,

I think i'm gonna use this one :-))

Thanks esorone

headbanger

Jan 1 2004, 11:31 PM

QUOTE (woodpecker_sjtu @ Dec 14 2003, 11:17 AM)

MhtRedirLaunchInetExe-Demo.zip
google it!

thats seems useful, ill try see what i can use it for

tstngry

Jan 2 2004, 04:06 AM

I don't think that i can learn unless i ask questions so here it goes. I dont understand how to use the html document and the upload.asp file. I have made both files (in notepad) but when i upload somthing it just goes to the upload.asp and displays whats inside it. How do i use this to upload to someones computer? Do i give them the upload.asp and if so where does mine or their ip go?
Thnx in advance

dotcom

Jan 5 2004, 12:13 PM

QUOTE (tstngry @ Jan 2 2004, 04:06 AM)

It must be run from an ASP enabled webserver to upload....try http://IP/upload.asp maybe or work from there....good luck

This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.