Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact

Executing serverside code on a Sharepoint 2010 server by changing the master page

On Sharepoint 2010, it is not possible to modify a page in ASP.NET. Instead, a "features" system is used. Sort of like a website builder.

I have access to a Sharepoint website's collection administrator account.(full privileges) I can do anything, but I'd like access to the machine itself. Is this doable? Am I able to execute a Metasploit payload for example or run a webshell by changing the master page? What would the best option be to execute serverside code and gain access to the server itself?

I do have knowledge of ASP.NET from 2014, which should be adequate.


Possibly Related Threads...
Thread / Author Replies Views Last Post
by WaltherApr 8, 2019 10:55 PM 4 186 Apr 8, 2019 10:55 PM
Last Post: Anova
by CocavetoMar 1, 2019 07:39 AM 1 122 Mar 1, 2019 07:39 AM
Last Post: ManOfire
by kaloyankJan 11, 2019 01:50 PM 0 122 Jan 11, 2019 01:50 PM
Last Post: kaloyank