[URGENT] How to make an ASP file vulnerable ?

Hey all,

As teh topic name says, i wanna add a Vulnerable Code to asn ASP file so that the asp file becomes Vulnerable to RFI.

For example , in php if u add this code :

<?php
$file=$_GET('file');
include($file);
?>

Code (markup):

this file becomes vulnerable to RFI ie

filename.php?file=php-shell-link



So, I want an ASP code that makes the asp file vulnerable so that a shell can be executed on the server.


If anyone knows please answer.

regards!

 

<%
dim incfile
incfile=request("file")
%>

<!--#include file=incfile -->

Code (markup):

 

That actually doesn't work, there is a way to do it, however what do you need to do this for?

 

unfortunately, you cannot use variables inside "include" statement in asp.

 

you may try

server.Execute("fileanme")