When the backup database is unavailable. Get webshell! by mailing list (figure) _ Vulnerability Research

This morning idle boring, just a friend sent over the background of a website management password. He asked me to take a look at him. I said you got backstage. You can use the Backup database feature to get Webshell AH. He said backstage has the option of data backup. But it doesn't work.

There are options for backing up. But after the click of the error! The administrator should have renamed the file. or the location has changed. You can't back up the database. Cannot waste such an opportunity in vain. I looked around in the background. found that you can change the site to register the user's e-mail address. We use a one-horse replacement, and then export the e-mail address as an ASP file. We can use a word Trojan client connected up. Let's see how I operate!

Point user Management. There will be a registered user admin. We'll order. will appear the website registration user's information!

Then, we click on the user name we want to modify and a window appears. In this window. We can modify the user's relevant information!

'

Here we are in the email address section. Put our words on the horse! Then click OK to modify it! Then we are in the clicking List to export!
A window appears after clicking

Then we change the file name of the exported mailing list to the database to what we need. The extension must be an ASP. Otherwise, we can not even use a word trojan. Here I changed to a file with my name konbluesy.asp!

Then we can use a word trojan to connect up. The address here is. The root of the Web site! Like the website is http://www.123.com/
So when we use a word. The address should be: http://www.123.com/konbluesky.asp