Web shell - Command execution, web.config parsing, and SQL query execution
Command execution - Run arbitrary Windows commands
Web.Config Parser - Extract db connection strings from web.configs (based on chosen root dir)
SQL Query Execution - Execute arbitrary SQL queries (MSSQL only) based on extracted connection strings
Antti - NetSPI - 2013
Thanks to Scott (nullbind) for help and fancy stylesheets
Based on old cmd.aspx from fuzzdb - http://code.google.com/p/fuzzdb/