Penetration Testing mailing list archives

Re: pen testing iis

From: Javier Fernandez-Sanguino Peña <jfernandez () sgi es>
Date: Thu, 28 Jun 2001 11:44:57 +0200

"Enrique A. Sanchez Montellano" escribió:


If you cannot tftp or ftp (happens) just echo the debug equivalent ....
=) ... long live debug since its on all windows machines ... then just
compile it on the server and VOILA!!!

debug is your friend!!!

        Umm.. doesnt' debug impose a limit in size?
        I find that it might be much better to uuencode the file and uudecode
it on the server, you can find a program such as "netsend" (ol' BBS
friend) which can generate an auto-decompresser uuencoded of any binary
file.

        Javi

--------------------------------------------------------------------------------------

This list is provided by the SecurityFocus Security Intelligence Alert (SIA) Service
For more information on SecurityFocus' SIA service which automatically alerts you to
the latest security vulnerabilities please see:

https://alerts.securityfocus.com/

Current thread:

pen testing iis 5 ExpLiciT (Jun 21)
- Re: pen testing iis suntzu (Jun 24)
  - Re: pen testing iis Enrique A. Sanchez Montellano (Jun 27)
    - Re: pen testing iis Javier Fernandez-Sanguino Peña (Jun 28)
- Re: pen testing iis 5 Javier Fernandez-Sanguino Peña (Jun 27)
- <Possible follow-ups>
- Re: pen testing iis 5 Stephen Friedl (Jun 22)
- Re: pen testing iis 5 Reverend Lola (Jun 22)
- RE: pen testing iis 5 dilbert96 (Jun 24)
- RE: pen testing iis 5 st0ff st0ff (Jun 25)
  - Pen Testing a Oracle database. How to pull data? Osvaldo J . Filho (Jun 26)
    - RE: Pen Testing a Oracle database. How to pull data? Aaron C. Newman (Jun 26)
    - RE: Pen Testing a Oracle database. How to pull data? George Milliken (Jun 26)