Re: IIS still revealing paths for web directories

[nick () NIGHTLABS DE (Niklas Schiffler)]

Please filter this if outdated.

I coulnd't find anything about CERN httpd 3.0 revealing paths in
the archives.

http://www.victim.com/cgi-bin/ls
results in:
Bad script request -- neither '/usr/local/etc/ls' nor '/usr/local/etc/ls.pp' is executable

http://www.victim.com/cgi-bin/cat
results in:
Bad script request -- neither '/usr/local/etc/cat' nor '/usr/local/etc/cat.pp' is executable

Greetings,

Nick