Re: Sam File via IIS flaw

["Jerome Athias" <jerome.athias () free fr>]

try SAMinside : http://www.insidepro.com/

Regards,
JA

----- Original Message ----- 
From: <nordicsmak () yahoo com>
To: <pen-test () securityfocus com>
Sent: Tuesday, June 28, 2005 9:02 PM
Subject: Sam File via IIS flaw


During a recent penetration test I've discovered a flaw in the IIS server 
that allows me to browse to and view any file on the system.

I'm able to browse to the /winnt/repair/sam file, but it obviously is 
unusable in the format that's presented in the browser.

Any way to get this file in a format that can be used in L0pht?

Thanks,
Chris