Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Humiliating IIS servers for fun and jail time

mll.sh

Post reply on HN
Print view View original

101–106 of 106 posts

Re: Humiliating IIS servers for fun and jail time

#101

Post by Lammy »

logifail wrote: post #75
Lammy wrote: post #13

> IIS has a legacy behavior inherited from the old DOS 8.3 filename convention. Is this exposing the underlying OS's behavior coupled with the fact that the IIS document root is `C:\Inetpub` by default? Eight-dot-three filenames are enabled by default on the C drive but disabled by default on all other drives on Windows 10/11: PS> (Get-ItemProperty -Path 'HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion').DisplayVe…

> PS> (Get-ItemProperty -Path 'HKLM:\SOFTWARE\Microsoft\WindowsNT\CurrentVersion').DisplayVersion > 24H2 I got no response to that command on my W10 box, turns out for older (eg LTSC) versions it appears to need: (Get-ItemProperty -Path 'HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion').ReleaseId 1809

Whoops, seems like that's related to their naming scheme change, and `ReleaseId` stopped incrementing after Windows 10 “2009” (2009 September) got renamed to “20H2”: https://vxtwitter.com/bytenerd/status/1395071115072966656

  PS> (Get-ItemProperty -Path 'HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion').ReleaseId
  2009
  PS> (Get-ItemProperty -Path 'HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion').DisplayVersion
  24H2

Re: Humiliating IIS servers for fun and jail time

#103

Post by pjmlp »

thedougd wrote: post #22
t1234s wrote: post #15

Does anyone use IIS anymore?

Amazingly some companies like Hyland still ship software that requires IIS. Bonus add are the pages and pages of setup instructions.

Sitecore, Microsoft as two other examples.

Sitecore on the classical XP/XM stack, they don't seem to be bothered to update it to modern .NET, as the new products moved away from .NET (XM Cloud and co).

Microsoft still has stuff like Dynamics 365, running .NET Framework.

Re: Humiliating IIS servers for fun and jail time

#104

Post by forgetfreeman »

swarnie wrote: post #97
forgetfreeman wrote: post #91

Earlier quoted context omitted.

Cloud's got nothing to do with it. The thought of standing up a windows box to serve anything other than profiles and user surveillance is simply foreign. Budget webhosting has been a thing for a long time and standing up a *nix VM is also no big deal. In 25 years in industry I never once saw an IIS server used in the wild. shrug

I'm surprised by this, maybe its industry specific. An 80:20 split of windows server to everything else has been pretty common in the areas I've worked both as a <10 day contactor and as a FTE.

Era may also be a major factor. When I was coming up through the ranks it was common wisdom, even in corporate windows-centric shops, that IIS was a vulnerability factory on par with sendmail.

Re: Humiliating IIS servers for fun and jail time

#105

Post by RetroTechie »

0x1d7 wrote: post #77
xmcp123 wrote: post #71

Oh man this takes me back. Once upon a time, all server logs were basically unusable because of the amount of IIS scanners out there. There was a directory traversal that was literally just url encoding “../“ that absolutely lit the internet on fire for many months.

Those traversal attempts are still very common, right next to the PHP/WordPress script kiddie attacks.

Wondering how far back that goes.. Win95 still vulnerable?

(Edit: I mean active attempts to exploit in the wild)

Post reply on HN