+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: how i can RCE on IIS 8.5 and 8 (/showthread.php?tid=6182323)
how i can RCE on IIS 8.5 and 8 - djevilas - Nov 24, 2021
how i can RCE on IIS 8.5 and 8
how i can RCE on IIS 8.5 and 8 only port 443 is open no file upload option on main page
RE: how i can RCE on IIS 8.5 and 8 - memory - Nov 25, 2021
443 is SSL, for websites running encrypted HTTPS connections, it is a common practice and would likely be unrelated towards what you’re looking for. I’m not sure there are any public RCE’s for IIS 8.5 yet, but I certainly encourage you to search online for something. I would assume the only ones out there are private 0 days.
RE: how i can RCE on IIS 8.5 and 8 - djevilas - Nov 27, 2021
thanks Sr, the only HTTP method that are allowed is POST GET HEAD OPTIONS AND TRACE, so can't upload a aspx reverse shell.
with scapy is possible to manipulate the packet and upload shell?