提升权限获取服务器管理权限（Raise permissions to obtain server management privileges）.docVIP

提升权限获取服务器管理权限（Raise permissions to obtain server management privileges） One: technical summary With the rapid development of Internet, many kinds of websites have been springing up Sex and diversity are the absolute advantages. As the ASP system is widely used on the Internet, scripting attacks against ASP systems have been booming recently. In these attacks, The attacker is using injection, cookies, Mancang marginalia, deception to obtain administrator privileges, Through the direct upload or backup backup and other intrusion methods Get web The hidden content of this post Webshell then controls the entire station spot Next, obtain the server administrative privileges by raising the permissions of the webshell. What is webshell? Webshell is written in a corresponding scripting language, with online editing, deleting, adding new files, and executing Programs and SQL statements and other functions of the script file, with arbitrary changes to the target home page, delete files and other permissions Such as the famous veterans and ocean top, is such a ASP script file, we commonly known as Malaysia and pony Two: the main means of invasion 1. upload vulnerability A: as the typical mobile Internet transmission vulnerability, we directly access the upload page. Two: enter the website background, upload script Trojan directly, get webshell. Because some of the site system is very trusted to the administrator. After entering the background, as long as you find the upload site, you can upload scripts Trojan horse Three: add upload type If the system code is limited and is not allowed to upload ASP files, then we can add files that allow ASACER to be uploaded, and then script Trojan The suffix corresponding to the modified ASACER.webshell can be used as well. Four: restore the ASP suffix by backing up the backup function If you cannot upload ASP.ASA.CER and other suffix files. We modify the script Trojan, the postfix name ASP, the JPG or the GIF picture suffix After uploading