aspdownload-bypass.txt

` \ ASPDownload v 1.03 Remote Admin Bypass Exploit /  
\ /  
\_______________________________________________/  
  
  
  
[+] Author : Underz0ne Crew  
[+] Script : ASPDownload v 1.03  
[+] Risk : High  
[+] Script URL : http://www.toddwoolums.com/aspdownload.asp  
[+] Dork : Powered by AspDownload  
  
--//--> Exploit Area :  
  
[+] Description : The problem is that the script's owner doesnt request a Login page for the DANGEROUS file setupdownload.asp where we can RESET the admin's   
access and change the admin's informations for whatever we want !  
  
[+] How to Exploit :  
  
1) Go to : http://dork.cc/PathToScript/setupdownload.asp  
2) Change the Info's  
3) Login with the new informations in default.asp page  
4) Upload an ASP shell from the upload.asp page  
  
So simple!  
  
  
[+] Greetz : stack , Bl@ckbe@rD , Djekmani , HouSSamiX   
  
`