Penetration Testing mailing list archives

RE: pen testing iis 5

From: st0ff st0ff <if0ff () yahoo com>
Date: Mon, 25 Jun 2001 07:48:32 -0700 (PDT)

Checkl out this Website:
http://hackersclub.com/km/files/nt/iis4_iis5_exploitscripts.zip

There is a Perl with you can Upload an upload.asp.
This  upload.asp is used for upload other files - very
easy over your browser!

Greetings

if0ff



Greetings.
I am pen-testing IIS 5 [no hotfixes] running in WinNT
4.0 with no fixes.  At
this point I want to upload a file to the box [nc.exe]
and then I will
definately have the box.  How can I go about doing
this?

Thanks

--ExpLiciT
        'Firewalls are speed bumps not brick walls'





__________________________________________________
Do You Yahoo!?
Get personalized email addresses from Yahoo! Mail
http://personal.mail.yahoo.com/

Current thread:

pen testing iis 5 ExpLiciT (Jun 21)
- Re: pen testing iis suntzu (Jun 24)
  - Re: pen testing iis Enrique A. Sanchez Montellano (Jun 27)
    - Re: pen testing iis Javier Fernandez-Sanguino Peña (Jun 28)
- Re: pen testing iis 5 Javier Fernandez-Sanguino Peña (Jun 27)
- <Possible follow-ups>
- Re: pen testing iis 5 Stephen Friedl (Jun 22)
- Re: pen testing iis 5 Reverend Lola (Jun 22)
- RE: pen testing iis 5 dilbert96 (Jun 24)
- RE: pen testing iis 5 st0ff st0ff (Jun 25)
  - Pen Testing a Oracle database. How to pull data? Osvaldo J . Filho (Jun 26)
    - RE: Pen Testing a Oracle database. How to pull data? Aaron C. Newman (Jun 26)
    - RE: Pen Testing a Oracle database. How to pull data? George Milliken (Jun 26)