Hacking IIS via WebDAV

[skidmarq]

Skid Rock: Hacking IIS via WebDAV

Here is a write-up of how to use WebDAV to your advantage when it comes to testing IIS.

Enjoy!

[Gitsnik]

Just a note, the heading of the link is probably not quite not safe for work. Just a heads up to anyone who clicks links while their boss is learning to use driftnet.

Edit: Oh yes, and the write up isn't too shabby. A little bit light on where you can go with it, but nevertheless not bad.

[skidmarq]

Thanks for the feedback, Gitsnik, much appreciated! While I was writing it, I thought it would be a good idea to leave it where I left it so the readers could play around a bit with their own personal privilege escalation techniques...

I've read some very interesting blogs recently the delve into this very topic

[fancy]

Nice blog skidmarq but please change that picture.......uuurrgh

[firebits]

This is my post, might help:

http://www.backtrack-linux.org/forum...v-servers.html

Module for Metasploit:
/msfmods/trunk/modules/auxiliary/scanner/http/webdav_test.rb

[Liuser]

Thanks for the tutorial. For those curious where the webdav_test auxiliary module is, you can get it here.

edit: Sorry, should have read further down to firebits' post. I double posted the webdav_test module.

Out of curiosity, does Nessus check for the webdav directory writable vulnerability?