Re: pen testing iis

From: suntzu (oonixat_private)
Date: Fri Jun 22 2001 - 19:59:32 PDT

Next message: dilbert96at_private: "RE: pen testing iis 5"

Previous message: MILES John M: "RE: SAM file editing"
In reply to: ExpLiciT: "pen testing iis 5"
Next in thread: Enrique A. Sanchez Montellano: "Re: pen testing iis"
Next in thread: dilbert96at_private: "RE: pen testing iis 5"
Reply: Enrique A. Sanchez Montellano: "Re: pen testing iis"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

If you have control of cmd.exe in the web root directory ( via unicode
) you can usually make nt tftp a file to the server of where you nc.exe my
live...

just a suggestion...

-suntzu 

On Mon, 18 Jun 2001, ExpLiciT wrote:

> Greetings.
> I am pen-testing IIS 5 [no hotfixes] running in WinNT 4.0 with no fixes.  At
> this point I want to upload a file to the box [nc.exe] and then I will
> definately have the box.  How can I go about doing this?
> 
> Thanks
> 
> --ExpLiciT
> 	'Firewalls are speed bumps not brick walls'
> 
>

Next message: dilbert96at_private: "RE: pen testing iis 5"
Previous message: MILES John M: "RE: SAM file editing"
In reply to: ExpLiciT: "pen testing iis 5"
Next in thread: Enrique A. Sanchez Montellano: "Re: pen testing iis"
Next in thread: dilbert96at_private: "RE: pen testing iis 5"
Reply: Enrique A. Sanchez Montellano: "Re: pen testing iis"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Sun Jun 24 2001 - 19:24:46 PDT