+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: Executing serverside code on a Sharepoint 2010 server by changing the master page (/showthread.php?tid=5558788)
Executing serverside code on a Sharepoint 2010 server by changing the master page - fafafefefofo0 - Feb 23, 2017
On Sharepoint 2010, it is not possible to modify a page in ASP.NET. Instead, a "features" system is used. Sort of like a website builder.
I have access to a Sharepoint website's collection administrator account.(full privileges) I can do anything, but I'd like access to the machine itself. Is this doable? Am I able to execute a Metasploit payload for example or run a webshell by changing the master page? What would the best option be to execute serverside code and gain access to the server itself?
I do have knowledge of ASP.NET from 2014, which should be adequate.