WebApp Sec mailing list archives

RE: getting an ASP file


From: "Calderon, Juan C (CORP, DDEMESIS)" <Juan.Calderon () ddemesis ge com>
Date: Mon, 21 Apr 2003 14:14:29 -0400

********
I've one web where I can insert html code(ASP code don't works) at forum
module developed in ASP.
Are there any way to recover an asp source file or global.asa by this
mode of codding;
********

HTML code is executed client side.  Even if you can insert HTML code in the Web server response, eventually your 
browser will be the one which executes it, so it will be like a simple (direct) browser request, therefore I think HTML 
code insertion is not useful for this purpose.

I Think you'll have yo try harder on ASP code execution or another server-side related technique.

cheers :)


Current thread: