Penetration Testing mailing list archives
RE: finding webroot on IIS
From: "George Milliken" <gmilliken () farm9 com>
Date: Thu, 14 Jun 2001 10:12:18 -0700
pipe this through the unicode shell and observe the results roughly cmd.exe attrib -s index.html George farm9 -----Original Message----- From: * (todd + 1) [mailto:todd () ubermother net] Sent: Wednesday, June 13, 2001 9:30 PM To: pen-test () securityfocus com Subject: finding webroot on IIS hello all, Recently i came across an IIS webserver that i found to be vulnerable to the Unicode attacks. However, i cannot determine the webroot of this drive, and therefore i am having troubles reaching a full comprimise. The directory "C:\Inetpub" exists, but the only contents of this directory is the folder "mailroot". Additionally, when i connect and request the root document (ie GET / ), it returns the string: "<% Response.ContentType = "text/plain" %> HELLO" Does anyone come across anything like this before, and what would be the simplest method of determining the webroot? thanks in advance todd willey ubermother
Current thread:
- finding webroot on IIS todd + 1 (Jun 14)
- RE: finding webroot on IIS George Milliken (Jun 14)
- Re: finding webroot on IIS David Page (Jun 14)
- Re: finding webroot on IIS David Jacoby (Jun 15)
- Re: finding webroot on IIS H D Moore (Jun 14)
- Re: finding webroot on IIS todd + 1 (Jun 14)
- Re: finding webroot on IIS Frederic Guerin (Jun 15)
- Re: finding webroot on IIS Gary Warner (Jun 18)
- 3 pigs building web servers? hacker wolf? Robert Shea (Jun 18)
- Re: 3 pigs building web servers? hacker wolf? ghandi (Jun 19)
- Re: 3 pigs building web servers? hacker wolf? Riley Hassell (Jun 19)
- 3 pigs building web servers? hacker wolf? Robert Shea (Jun 18)
- <Possible follow-ups>
- RE: finding webroot on IIS Yonatan Bokovza (Jun 14)