IIS and ASP.NET

Upload .aspx/.config, abuse web.config or ViewState on IIS servers. Used in 9 machines, sorted from easiest to hardest. The ▶ link takes you to the minute of the video where it is used.

Often goes with

Combine this technique with others in the search →