FunkyASP AD System version 1.1 suffers from a remote shell upload vulnerability.
d6cc3891f2531947d0618201cf76d7db062ba278a711f5f156d9b0bd83cd6f60
[~] FunkyASP AD System v1.1 Remote Shell Upload
[~]
[~] script: https://www.funkyasp.co.uk/cats.asp?id=1¤cy=GBP
[~]
[~] ----------------------------------------------------------
[~] Discovered By: ZoRLu
[~]
[~] Date: 04.04.2009
[~]
[~] Home: yildirimordulari.com / experl.com / z0rlu.blogspot.com / woltaj.org
[~]
[~] contact: trt-turk@hotmail.com
[~]
[~] N0T: BasImIz Sagolsun, Muhsin YazIcIoglu Ulkemiz ve Ulkumuz icin Buyuk KayIp Allah Rahmet Eylesin :((
[~]
[~] N0T: Herkes Hecker Olmus :S yav siktirin gidin mal mal gelip msn de konusmayIn :S anlayan anladI :S
[~]
[~] N0T: if you wanna learn hack you must be register to my site yildirimordulari.com
[~] -----------------------------------------------------------
first register to site
you add this code your shell to head
GIF89a;
example your_shell.asp:
GIF89a;
<?
...
...
...
?>
and save your_sheell.asp
you go to here:
https://yildirimordulari.com/demo/banner/admin.asp?action=upload
and your shell here:
https://yildirimordulari.com/demo/banner/banners/z.asp
for demo:
https://demo.funkyasp.com/demo/banner/admin.asp?action=upload
shell:
https://demo.funkyasp.com/demo/banner/banners/z.asp
[~]----------------------------------------------------------------------
[~] Greetz tO: str0ke & DrLy0N & w0cker & Cyber-Zone
[~]
[~] yildirimordulari.com / experl.com / z0rlu.blogspot.com / woltaj.org
[~]
[~]----------------------------------------------------------------------