Penetration Testing mailing list archives

Re: finding webroot on IIS


From: Gary Warner <gar () askgar com>
Date: Fri, 15 Jun 2001 11:48:48 -0500

Well, *IF* they are IISCODE vulnerable, I would guess there is a high likelihood
you could find the path like this:

http://www.target.com/pathcheck.ida
or
http://www.target.com/pathcheck.idq

You should get a response that looks like this:

Error "The IDQ file D:\program Files\XXXXXXX\YYYYYYY\anything.ida could not be
found. " (0xc000203e) encountered while processing the query "".

or more likely:

Error "The IDQ file D:\InetPub\wwwroot\anything.ida could not be found."

There are no MS patches that automatically correct this one.  You fix it by
associating the IDQ/IDA file extensions differently.

_-_
gar


Current thread: