+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: Looking for an asp shell with connection to database and upload and execute function (/showthread.php?tid=4979658)
Pages: Pages
1
2
Looking for an asp shell with connection to database and upload and execute function - ASTRAPI - Sep 7, 2015
Hi
I am looking for an asp/aspx shell with connection to database and upload and execute function :)
It is for a windows server that i can't run php and i want to get local admin info and if i am lucky to crack them or maybe use metasploit for privilege escalation :)
Any info?
Thanks
* - bass booster - Sep 7, 2015
I've been looking for a database viewer all day, got nothing. As for a shell, I got a c99 updated and that worked fine.
Also maybe a wso 2 version might have worked but I don't remember
* - ๖ۣۜSyria - Sep 7, 2015
(Sep 7, 2015 06:31 PM)bass booster Wrote: I've been looking for a database viewer all day, got nothing. As for a shell, I got a c99 updated and that worked fine.
Also maybe a wso 2 version might have worked but I don't remember
You can use the shell to look for the php files that connect to the db once u find it click
![[Image: 440759ba8f9d17dee90ed7eb67e7e1e3.png]](https://i.gyazo.com/440759ba8f9d17dee90ed7eb67e7e1e3.png)
then enter the info
![[Image: 7853e3d493fb7263994e0dfea624fe7a.png]](https://i.gyazo.com/7853e3d493fb7263994e0dfea624fe7a.png)
just look hard and try to find a php that is used to connect to the db (their is always one if the website has a db)
* - ASTRAPI - Sep 8, 2015
I am asking for an asp/aspx shell as php is not running on the server :)
I have login and i know how to connect using a shell but i always used php shell but now i need an asp/aspx shell.....
* - IDK - Sep 8, 2015
(Sep 8, 2015 06:10 AM)ASTRAPI Wrote: I am asking for an asp/aspx shell as php is not running on the server :)
I have login and i know how to connect using a shell but i always used php shell but now i need an asp/aspx shell.....
here you go rename it to aspx and you are ready to rock
http://pastebin.com/xfhYhVuS
* - ASTRAPI - Sep 8, 2015
Great thanks i will test it :)
Is the correct syntax to use Connection String like this?
Server=SQlServerName; Database=YouDatabaseName; User Id=userid; password= password
Also i got a user and pass from Web.config.... Where can i use them to login for?
* - IDK - Sep 8, 2015
(Sep 8, 2015 07:43 AM)ASTRAPI Wrote: Great thanks i will test it :)
Is the correct syntax to use Connection String like this?
Server=SQlServerName; Database=YouDatabaseName; User Id=userid; password= password
Also i got a user and pass from Web.config.... Where can i use them to login for?
Web.config is config file use the username and pass to connect to the database using the shell i gave you
* - ASTRAPI - Sep 8, 2015
Yes but the shell asks for Connection string and not just user and pass that's why i ask for the syntax of it...
* - bass booster - Sep 8, 2015
(Sep 7, 2015 07:01 PM)๖ۣۜSyriamanal Wrote: You can use the shell to look for the php files that connect to the db once u find it click
then enter the info
just look hard and try to find a php that is used to connect to the db (their is always one if the website has a db)
I know the login, but the database isn't mysql it's mssql (Microsoft sql). I tried Wso but it didn't let me connect to the db
* - IDK - Sep 9, 2015
(Sep 8, 2015 09:53 AM)ASTRAPI Wrote: Yes but the shell asks for Connection string and not just user and pass that's why i ask for the syntax of it...
I used this shell like 6 months ago xD and I forget the syntax 🤣 . if you can pm me the shell then i can try to connect to the db
* - ASTRAPI - Sep 9, 2015
I will wait first if anyone knows the syntax and post it here :)
* - nameisno - Sep 9, 2015
it's easy to connect to the the db on win servers just make sure that the db is MSSQL or OLEEDB
* - ASTRAPI - Sep 10, 2015
The shell is asking for syntax string ....
* - nameisno - Sep 10, 2015
u don't have to connect from a shell :3 u can connect from many programes from microsoft or other softwares & if the db is OLEDB u can easly download it a open it from Microsoft Access programe then u'll get all tables ;)
* - ASTRAPI - Sep 11, 2015
I do not have access to db files to download them and there is no any phpmyadmin panel or something related .... so the only way i think is to use the .asp shell and get a connection to the db or not?