Sep 7, 2015 05:52 PM
(This post was last modified: Sep 7, 2015 05:53 PM by ASTRAPI.)
Hi
I am looking for an asp/aspx shell with connection to database and upload and execute function :)
It is for a windows server that i can't run php and i want to get local admin info and if i am lucky to crack them or maybe use metasploit for privilege escalation :)
Any info?
Thanks
I've been looking for a database viewer all day, got nothing. As for a shell, I got a c99 updated and that worked fine.
Also maybe a wso 2 version might have worked but I don't remember
DO NOT DEAL WITH THIS MEMBER
(Sep 7, 2015 06:31 PM)bass booster Wrote: I've been looking for a database viewer all day, got nothing. As for a shell, I got a c99 updated and that worked fine.
Also maybe a wso 2 version might have worked but I don't remember
You can use the shell to look for the php files that connect to the db once u find it click
![[Image: 440759ba8f9d17dee90ed7eb67e7e1e3.png]](https://i.gyazo.com/440759ba8f9d17dee90ed7eb67e7e1e3.png)
then enter the info
![[Image: 7853e3d493fb7263994e0dfea624fe7a.png]](https://i.gyazo.com/7853e3d493fb7263994e0dfea624fe7a.png)
just look hard and try to find a php that is used to connect to the db (their is always one if the website has a db)
I am asking for an asp/aspx shell as php is not running on the server :)
I have login and i know how to connect using a shell but i always used php shell but now i need an asp/aspx shell.....
(Sep 8, 2015 06:10 AM)ASTRAPI Wrote: I am asking for an asp/aspx shell as php is not running on the server :)
I have login and i know how to connect using a shell but i always used php shell but now i need an asp/aspx shell.....
here you go rename it to aspx and you are ready to rock
http://pastebin.com/xfhYhVuS
Sep 8, 2015 07:43 AM
(This post was last modified: Sep 8, 2015 07:44 AM by ASTRAPI.)
Great thanks i will test it :)
Is the correct syntax to use Connection String like this?
Server=SQlServerName; Database=YouDatabaseName; User Id=userid; password= password
Also i got a user and pass from Web.config.... Where can i use them to login for?
(Sep 8, 2015 07:43 AM)ASTRAPI Wrote: Great thanks i will test it :)
Is the correct syntax to use Connection String like this?
Server=SQlServerName; Database=YouDatabaseName; User Id=userid; password= password
Also i got a user and pass from Web.config.... Where can i use them to login for?
Web.config is config file use the username and pass to connect to the database using the shell i gave you
Yes but the shell asks for Connection string and not just user and pass that's why i ask for the syntax of it...
(Sep 7, 2015 07:01 PM)๖ۣۜSyria Wrote: You can use the shell to look for the php files that connect to the db once u find it click
then enter the info
just look hard and try to find a php that is used to connect to the db (their is always one if the website has a db)
I know the login, but the database isn't mysql it's mssql (Microsoft sql). I tried Wso but it didn't let me connect to the db
(Sep 8, 2015 09:53 AM)ASTRAPI Wrote: Yes but the shell asks for Connection string and not just user and pass that's why i ask for the syntax of it...
I used this shell like 6 months ago xD and I forget the syntax 🤣 . if you can pm me the shell then i can try to connect to the db
I will wait first if anyone knows the syntax and post it here :)
DO NOT DEAL WITH THIS MEMBER
it's easy to connect to the the db on win servers just make sure that the db is MSSQL or OLEEDB
The shell is asking for syntax string ....
DO NOT DEAL WITH THIS MEMBER
u don't have to connect from a shell :3 u can connect from many programes from microsoft or other softwares & if the db is OLEDB u can easly download it a open it from Microsoft Access programe then u'll get all tables ;)
I do not have access to db files to download them and there is no any phpmyadmin panel or something related .... so the only way i think is to use the .asp shell and get a connection to the db or not?
|
