---
id: 8290
title: "Adding PowerShell to Web Shells to get Database Access"
source_domain: netspi.com
source_url: "https://www.netspi.com/blog/technical-blog/network-pentesting/adding-powershell-to-web-shells-to-get-database-access/"
published_at: "2013-04-22T00:00:00Z"
tags: ["powershell", "file-upload", "mssql", "web-shell", "iis", "aspx", "database-access"]
phying_url: "https://phying.com/item/8290"
lang: en
---

# Adding PowerShell to Web Shells to get Database Access

## Summary

A rewritten .aspx web shell embeds PowerShell for direct MSSQL connectivity, showing how much data a simple upload vulnerability exposes when multiple apps share a server, without full compromise.

## Intelligence Metadata

- **Sources:** netspi.com
- **Published:** 2013-04-22T00:00:00Z
- **Original:** https://www.netspi.com/blog/technical-blog/network-pentesting/adding-powershell-to-web-shells-to-get-database-access/
- **Phying News:** https://phying.com/item/8290