Remote Editor Module
Description
This script was originally designed by myself as a lightweight example of a common
script used remotely modifying text files, mostly because I was curious just how small
one of these pages could get while still offering enough features to make it useful.
Secondly it allows you to test if you have given your IUSR too much authority inside
your webroot, because unless it clearly needs to the IUSR should never be able to
read much outside the webroot, and it certainly should not be able to write anywhere
unless it is needed to, and the same goes for deletion.
Requirements
- IIS
- FileSystemObject
- Incorrectly set permissions
Single Compressed Download
Individual Components
Installation & Setup
-
Save the source code file into a directory somewhere within your webroot, naming it code.asp
User Guide
As an example of what it does, create a new text document in the root, lets call it
showme.txt and put
a simple sentence into it. Now point your browser at the script and type in
/showme.txt as the relative
path, then click execute.
The contents of your file should now appear in a text box below. If you edit the contents of that text box, then
click the
write option followed by execute you should find that the file has had it's contents updated.
Lastly choose the
delete option followed by execute, and you should find
showme.txt has dissappeared.
If you managed to follow that tutorial through without getting any errors you should be a little nervous because
if you can do that so can anyone else that manages to get a similar tool uploaded!