Penetration Testing: IIS & w2k

["Luis Javier Perez" <lperez () scitum com mx>]

Hi everyone.

I'm actually doing a pt, and i'm facing a trouble, the scenario has a web
server with w2k and iis 5.0, now i have put netcat listening on port 99 and
i can browse files and stuff like that but i need to scale privileges, i
tried hk but it fails.. is there something like hk for win2k???
With the info i collected i noticed the server connects with a sql server..
how can i do to exploit the sql..

any help would be appreciated..


thanks..