full-disclosure - IIS double UTF decoding bug (old) exploit: IIS explorer

Open Source and information security mailing list archives

Message-ID: <003501c228fc$80fa4470$f954b8a1@entrenchtech.com>
From: steve at entrenchtech.com (Steve)
Subject: IIS double UTF decoding bug (old) exploit:  IIS explorer

So how hard is it going to be to take a tool/script that only tests
localhost and modify it to test other hosts?  There is really no point in
forcing localhost as it won't stop anyone.

Regards;

Steve Manzuik
Founder & Technical Lead
Entrench Technologies
www.entrenchtech.com

Moderator - VulnWatch
www.vulnwatch.org

www.csicon.net

----- Original Message -----
From: "Steve" <steve@...eogroup.com>
To: <full-disclosure@...ts.netsys.com>
Sent: Thursday, July 11, 2002 10:26 AM
Subject: Re: [Full-Disclosure] IIS double UTF decoding bug (old) exploit:
IIS explorer

> On Thursday 11 July 2002 11:28 am,  you wrote:
> >(Ok, it's an old bug but since a lot of non-geeks seem to hate updating
> > their IIS, there still are plenty of valid targets for this exploit.)
> >
> >-- SCRIPT KIDDIE COMPATIBLE EXPLOIT ATTACHED --
> >The attached file IISexploere.php is my "SCRIPT KIDDIE COMPATIBLE"
exploit
> > for the double urldecoding bug in IIS. (It's a modified version of
> > PHPexplorer, also written by yours truly ;)
> <snip>
> >Berend-Jan Wever aka SkyLined
> >http:/spoor12.edup.tudelft.nl
> >.
>
> Since it looks like we are going to have tools to test holes, the policy
of
> only releasing ones designing to test your own system for flaws, needs to
be
> in. As Berend says we don't need to make it any easier for script kiddies.
>
> Also, this list is going to have script kiddies on it so people needs to
be
> kept aware of not posting specifics about their network which can then be
> used to root them. Too often I see people giving out all sorts of
information
> about their network on lists thinking there are only white hats on it.
> --
>
> Steve Szmidt
> V.P. Information Technology
> Video Group Distributors, Inc.
> _______________________________________________
> Full-Disclosure mailing list
> Full-Disclosure@...ts.netsys.com
> http://lists.netsys.com/mailman/listinfo/full-disclosure

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives