xsspresso
xsspresso
Tags/ ASPX

ASPX

2 writeups tagged with ASPX

WebEasyWindows

HTB — Granny

WebDAV file upload with extension spoofing deploys an ASPX shell. Token impersonation via churrasco/juicy potato for SYSTEM.

#WebDAV#ASPX#Token Impersonation
May 26, 2022HackTheBox
WebEasyWindows

HTB — Devel

Anonymous FTP write access to IIS webroot allows ASPX webshell upload. Local kernel exploit for SYSTEM.

#FTP#IIS#ASPX
May 10, 2022HackTheBox