The Ethical Hacker Network - help needed in retrieving the uploaded shell

Latest Additions

Who's Online

manoj9372

Jr. Member

Offline

Posts: 72

help needed in retrieving the uploaded shell

« on: August 26, 2011, 02:10:07 AM »

hi guys,
I have been learning some basic web-application exploitation these days,
today i have been trying the basic exploitation

i.e exploiting arbitrary file uploads

i have been practicing this on my friends
jsp web-site running with Apache-Coyote/1.1...,

i had successfully uploaded the shell with a file name like this

Code:

commander.jsp.%%.jpeg

but while i tried to retrieve the shell after uploading i am getting error like this

Code:

The image "http://target.com/state/userregistrationimages/previewtemp/photo-1314340617178.jpg" can not be displayed,because it contains errors

Also the web-server supports the following http methods "GET, HEAD, POST, PUT, DELETE, TRACE, OPTIONS"

when i check with some tools ...

I would like to retrieve my uploaded shell,

is it possible to do that ?

Any suggestions/advice please?


« Last Edit: August 26, 2011, 03:28:08 AM by manoj9372 »	Logged

ajohnson

Recruiters
Hero Member

Offline

Posts: 1057

aka dynamik

Re: help needed in retrieving the uploaded shell

« Reply #1 on: August 31, 2011, 08:10:26 AM »

If the application is renaming what you upload to <random number>.jpg, the web server isn't going to execute that as a .jsp file.

Also, Metasploit has a module for working with those unsafe HTTP methods: http://www.metasploit.com/modules/auxiliary/scanner/http/writable


	Logged

WIP: GCFA | www.infosiege.net | @infosiege

The day you stop learning is the day you start becoming obsolete.

manoj9372

Jr. Member

Offline

Posts: 72

Re: help needed in retrieving the uploaded shell

« Reply #2 on: September 03, 2011, 05:24:04 AM »

Code:

Thanks "dynamik" i got your point,so even if we upload the file like evil.jsp.%%.jpg,it wont get executed as jsp file,so there is no point of bypassing the filters it seems.