Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Humiliating IIS servers for fun and jail time

mll.sh

Post reply on HN
Print view View original

11–20 of 106 posts

Re: Humiliating IIS servers for fun and jail time

#11

Post by deadbabe »

mopsi wrote: post #8
sytelus wrote: post #6

This is extremely well done design (at least on full desktop browsers). Amazing content as well.

"Amazing" is a little generous for script kiddie stuff from the early 2000s. The author has yet to learn the extent to which civilization depends on people not being cunts to one another for no good reason.

[flagged]

Re: Humiliating IIS servers for fun and jail time

#12

Post by cindyllm »

deadbabe wrote: post #11
mopsi wrote: post #8

Earlier quoted context omitted.

"Amazing" is a little generous for script kiddie stuff from the early 2000s. The author has yet to learn the extent to which civilization depends on people not being cunts to one another for no good reason.

[flagged]

[dead]

Re: Humiliating IIS servers for fun and jail time

#13

Post by Lammy »

> IIS has a legacy behavior inherited from the old DOS 8.3 filename convention.

Is this exposing the underlying OS's behavior coupled with the fact that the IIS document root is `C:\Inetpub` by default? Eight-dot-three filenames are enabled by default on the C drive but disabled by default on all other drives on Windows 10/11:

  PS> (Get-ItemProperty -Path 'HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion').DisplayVersion
  24H2

  PS> fsutil 8dot3name query C:
  The volume state is: 0 (8dot3 name creation is ENABLED)
  The registry state is: 2 (Per volume setting - the default)
  Based on the above settings, 8dot3 name creation is ENABLED on "C:"

  PS> fsutil 8dot3name query U:
  The volume state is: 1 (8dot3 name creation is DISABLED)
  The registry state is: 2 (Per volume setting - the default)
  Based on the above settings, 8dot3 name creation is DISABLED on "U:"

Re: Humiliating IIS servers for fun and jail time

#17

Post by BalinKing »

mopsi wrote: post #8
sytelus wrote: post #6

This is extremely well done design (at least on full desktop browsers). Amazing content as well.

"Amazing" is a little generous for script kiddie stuff from the early 2000s. The author has yet to learn the extent to which civilization depends on people not being cunts to one another for no good reason.

The lead says "how I approach IIS targets during bug bounty" (emphasis mine), so (assuming the author is being truthful) I'm guessing the tone of the title is just for fun.

Re: Humiliating IIS servers for fun and jail time

#20

Post by Stitch4223 »

andai wrote: post #14
hstaab wrote: post #4

The tone of this is something else

Several times, I wondered if Claude wrote it.

One confusing part is that the blue screen is not a reference to BSOD but to the IIS default page with the blue squares. That’s probably jargon.

The article lists all the tricks I’ve collected over the years doing pentesting and then some, with great tool references. The signal to noise ratio is very high and there’s little “here’s why” filler which instead might just be someone’s way of storytelling. The article drones on, but with actual content as there is a lot to tell. It’s even light on features like trace.axd, but does mention them and their purposes.

I found it an entertaining overview of taking apart unassuming IIS servers and the point of “Recon harder. ” is made very well :)

Edit: s/boring/unassuming + added point was made very well

Post reply on HN