Penetration Testing mailing list archives
Re:IIS & w2k
From: <renato.ettisberger () ch pwcglobal com>
Date: Tue, 05 Jun 2001 11:13:02 +0200
Hi I had once the same problem. As you may remember, hk works only on win nt. There are some local exploits for win2k (have a look for pipeupsam, for example) too. I installed a netcat server (as you did) and I tried to run the pipeupsam exploit. But it doesn't work. It works only, if I run the exploit local or if I telnet into the box and run it afterwards. If someone can explain why, please let me know. regards Renato
Hi everyone.
I'm actually doing a pt, and i'm facing a trouble, the scenario has a web server with w2k and iis 5.0, now i have put netcat listening on port 99
and
i can browse files and stuff like that but i need to scale privileges, i tried hk but it fails.. is there something like hk for win2k??? With the info i collected i noticed the server connects with a sql
server..
how can i do to exploit the sql..
---------------------------------------------------------------- The information transmitted is intended only for the person or entity to which it is addressed and may contain confidential and/or privileged material. Any review, retransmission, dissemination or other use of, or taking of any action in reliance upon, this information by persons or entities other than the intended recipient is prohibited. If you received this in error, please contact the sender and delete the material from any computer.
Current thread:
- IIS & w2k Luis Javier Perez (Jun 04)
- Re: IIS & w2k Tom Fischer (Jun 05)
- <Possible follow-ups>
- RE: IIS & w2k Read, Greg (Jun 04)
- RE: IIS & w2k Yonatan Bokovza (Jun 04)
- Re:IIS & w2k renato.ettisberger (Jun 05)