Penetration Testing mailing list archives

Pen Test help


From: "Juda Barnes" <securityfocus () mymail pent900 com>
Date: Thu, 14 Jul 2005 20:57:22 +0200

 
Hi all
 
     i am doing Audit and pen test on machine till now i have figure out
that it is running 
    on Microsoft Windows 2000 SP3 or maybe SP4  Default installation
 
    With WebDAV and FrontPage Installed
 
 
 
    FPSE 4.0.2.5526, Microsoft-IIS/5.0
 
    i used nessus and find the following vulnerbilities
 
   -----> Plugin ID 11412  - WebDav Remote exploit  MS03-007
   -----> Plugin ID 11664  - NSIISLOG.DLL 
    Plugin ID 10661  - IIS5 .printer ISAP IPP
    Plugin ID 10695  - .IDA ISAPI  (MS01-033)
 
 
    also i have verifyed that the server have nsiislog by
http://server/scripts/nsiislog.dll 
    i have tried to use the nsiislog exploit with no sucsseful ,
 
    i will appriciate any good links where can i read regarding the NSIISLOG
exploit or other exploits
    that i can find for that machine ( i wrote the vulnerabilities up there)
 


Current thread: