Vulnerability Development mailing list archives

dos commands via iis 4


From: booboo <booboo () 65535 COM>
Date: Thu, 9 Nov 2000 11:21:34 +0000

Dear Guys,
        I have been playing around with the latest iis unicode bug using
the ..%c0%af.. strings and have had some success. I have been able to get
directory listings of all the drives, lists of users and shares and steal
files etc.. However, I have not been able to create files. I have been
trying to use 'type'with re-directs but it does not seem to like the
re-direct symbols. I have tried in quotation marks and using hex but no
luck. Does anyone know how to do it.. or has an alternative..

This is just for testing. Any help appreciated.

BooBoo


Current thread: