Shulou(Shulou.com)06/01 Report--

Beginners start bit by bit and accumulate slowly. Let's start with an iis6.0 parsing vulnerability verification process.

There are still many websites based on iis6.0 to search through www.shodan.io, especially asp and aspx. Now let's briefly talk about the verification process of iis6.0 parsing vulnerabilities.

1. Set up your own server2003 and simply build an asp website of iis6.0.

2. The first is to verify the directory resolution vulnerability. The directory resolution vulnerability is to create a folder with the suffix of asp under the website directory, and then the files with other suffixes such as .jpg, .txt, .doc under the folder will be parsed to asp.

At this time, there are three different formats of a sentence under aa.asp, as shown in the following figure

You can directly use the kitchen knife to connect to the sentence uploaded *:

3. When verifying suffix resolution vulnerabilities, files in xx.asp;.jpg format will be automatically parsed to asp.dll under xx.asp,iis6.0, and the semicolons will be terminated directly when they encounter semicolons. For more information, please refer to the http://lcx.cc/?i=1958 description of Nuclear'Atk Network Security Research Center.

4.aspmit.jpg in the figure above will be parsed as 4.jsp, directly connected with kitchen knives.

Xx.asp:.jpg will also be parsed to xx.asp, which I did not specifically verify. When using this, you need to use the tool to intercept packets and change the suffix yourself, because the semicolon in the file name is not supported under windos.

This is their own accumulation, slowly accumulate the knowledge of the bar, I hope you can give me a lot of advice.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.