🧠 Antak Webshell + ASPX Concepts

Here are your structured notes on the Antak Webshell, including all key concepts, commands, tools, and workflow steps:

---

📘 ASPX and Learning Resource Tip

• ASPX = Active Server Pages Extended, part of Microsoft’s ASP.NET framework.

• Renders HTML pages dynamically using server-side code.

• Allows remote code execution on Windows servers when exploited via web shell.

💡 Learning Tip: Use IPPSEC

• https://ippsec.rocks is a powerful search engine for HTB video walkthroughs.

• Search for keywords like aspx, webshell, etc.

• Watch only the relevant parts of each YouTube video.

• 🎥 Recommended: Watch the retired HTB box Cereal from 1:17:00 to 1:20:00 for an ASPX webshell example.

---

🛠️ What is Antak Webshell?

• ASPX-based web shell from the Nishang framework.

• Uses PowerShell on the backend to execute commands.

• Can:

  • Encode & execute PowerShell scripts

  • Upload/download files

  • Execute SQL queries

  • Parse web.config

• Located at:

/usr/share/nishang/Antak-WebShell/

---

🧪 Working with Antak Webshell

✅ Step 1: Copy the Shell for Modification

cp /usr/share/nishang/Antak-WebShell/antak.aspx /home/administrator/Upload.aspx

---

✅ Step 2: Modify Credentials in the File

Edit Upload.aspx, go to line 14, and set your own username and password:

if(Request["username"] == "htb-student" && Request["password"] == "htb-student")

🧼 Optional but recommended:

• Remove ASCII art, verbose comments, and unused code for evasion.

---

✅ Step 3: Update /etc/hosts

To resolve the internal domain name:

sudo nano /etc/hosts

Add:

<target-ip> status.inlanefreight.local

---

✅ Step 4: Upload the ASPX File

• Use the upload form on the status.inlanefreight.local site.

• Files are stored in the \\files\\ directory.

• Example URL after upload:

status.inlanefreight.local/files/Upload.aspx

---

✅ Step 5: Access the Web Shell

• Navigate to the uploaded file in browser.

• Enter the credentials (htb-student / htb-student).

• You should see the Antak Web Shell interface.

---

🧰 Antak Web Shell Features

• PowerShell command input panel

• Upload & download files

• Encode & execute base64 scripts

• Buttons for:

  • 🔄 clear

  • 🧠 help

  • 🧾 Parse web.config

  • 💾 Upload/Download

  • 🧪 SQL Execution

• Executes each command as a new PowerShell process

---

🧪 Example Commands in Antak

whoami
Get-Process
Invoke-WebRequest
Get-ChildItem -Path C:\
Invoke-Command -ScriptBlock { ... }

To start:

help

---

🚩 Why Use Antak?

• Easy, browser-accessible shell

• Great for post-exploitation and host enumeration

• Can upgrade to full reverse shell using:

  • PowerShell one-liner

  • File upload

  • Staged Meterpreter payload