Penetration Testing mailing list archives

IIS & w2k


From: "Luis Javier Perez" <lperez () scitum com mx>
Date: Mon, 4 Jun 2001 09:49:05 -0500

Hi everyone.

I'm actually doing a pt, and i'm facing a trouble, the scenario has a web
server with w2k and iis 5.0, now i have put netcat listening on port 99 and
i can browse files and stuff like that but i need to scale privileges, i
tried hk but it fails.. is there something like hk for win2k???
With the info i collected i noticed the server connects with a sql server..
how can i do to exploit the sql..

any help would be appreciated..


thanks..




Current thread: