+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: IIS 7.5 hacking (/showthread.php?tid=6232103)
IIS 7.5 hacking - Vaso Shisha - Jan 31, 2023
Any good tips for hacking an iis 7.5 server? It does not seems vulnerable to XSS. Tried directory traversal, but was unable to find anything useful. The ::$Index_Allocation method seems to work only if you are on machines running on local servers. Also after few deep scans i found open port running RDP, that Shodan has missed. haven't tried bruteforcing the creds though.
RE: IIS 7.5 hacking - Skorp - Feb 2, 2023
Not sure what kind of server this is but I would try to bruteforce (since you haven't yet) to see if it's secure credential wise, aswell as trying all other possible combinations. If that works, make a payload utilizing (for ex:) netcat and bam done.
If that fails, go on to the next step or you can PM me for the next steps you can take if you don't make it in. Start small and incrementally grow in severity, exploitation wise.