[M3e0]

Hi all
i have target that it runs IIS6 + webdav enable
i run directory scanner on target and find some available directories and i can connect to them with cadaver without any password request, i can get , read but i cannot put or delete or edit
i send a OPTIONS request and get

Allow: OPTIONS, TRACE, GET, HEAD, COPY, PROPFIND, SEARCH, LOCK, UNLOCK

i know i am in restricted area but how i can bypass this restriction and put my file?

[Sp1gg5]

IIS6 & webdav have a BOF. Check out : Microsoft IIS WebDav ScStoragePathFromUrl Overflow

[M3e0]

IIS6 & webdav have a BOF. Check out : Microsoft IIS WebDav ScStoragePathFromUrl Overflow

Sp1gg5
i have tried that exploit but it gives me nothing
and, is there anyway to use this exploit with specific path, i mean the default path is just xx.xx.xx.xx i mean use against xx.xx.xx.xx/PATH???