Wangqi IWMS system uses shell in the background

Target site: http: // 192.168.1.105! )
Target System: 2k3 + iis6.0 + asp.net
In order to study at the fik forum, we have made a big difference.
Xiaocaiwangqi iwms uses shell. it was actually very simple, but I was confused. alas, no way to cook it. I couldn't find a shell tutorial on the Internet, so I wrote this article. I hope I can get the invitation code of Falk. Well, I don't have to talk about it anymore. I just started!
The day before yesterday, a friend lost a background address and account password (as if there was something nonsense ^-^)

Http: // 192.168.1.105/admin_login.aspx

Account: admin Password: admin
Go in and have a look. Wow, I have never seen any background!

Pull down and find a data backup. Click here to see,

 

I have never seen this before,
Try adding a picture to the news, www.2cto.com

Try iis6's loopholes and change my cute pony to a.aspx0000.jpg

Upload Failed, tragedy! Try another sentence,

It is uploaded. Please check it out.

Sorry, I don't know. Check out how the backup works first.

Depressed, I don't know the website path. It's a bad luck!
Let's talk about Baidu,

People solve the problem, but they don't go out of the tutorial.
Back to the backend, turning east and west, and I couldn't find anything to use. Alas, my friends told me to give up, but I was unwilling.
So I clicked the system settings in the background.
Found this:

 

Try to see if you can add An aspx suffix first,

Click the next modification, and the modification is successful. If you are depressed, you can directly access the aspx Trojan.

Http: // 192.168.1.105/upload/2012-08/temp_12080108103665.aspx
Hey, the cute girl is out,

Well, let's get started with shell. Well, there's no technical content. I just want to study at the fik forum.

Wishing you a better deal!

Make everyone laugh!

France's Forum team.f4ck.net