pen-test
[Top] [All Lists]

Re: front page extansions

To: pen-test@securityfocus.com
Subject: Re: front page extansions
From: "Nikhil Wagholikar" <visitnikhil@gmail.com>
Date: Mon, 28 May 2007 10:10:06 +0530
Delivered-to: sp-com-lists@consult.net
Delivered-to: pentest-list2@consult.net
Delivered-to: mailing list pen-test@securityfocus.com
Delivered-to: moderator for pen-test@securityfocus.com
Dkim-signature: a=rsa-sha1; c=relaxed/relaxed; d=gmail.com; s=beta; h=domainkey-signature:received:received:message-id:date:from:to:subject:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; b=VGtfvimgRHFBusnrEG7k6rPVk2ne6brKPSdPOTdBNaUvaAUjS+YJ+5fSHjyYgcYnwZHUz+qUAaOGqftO6kZiULVqh3bd0MexgDPLCPm/8YdPvfnb5nzJGBjQBgwd6oX1T4sDrV3JqzYERaCYKNRHnf+axMc/qPi+aQnBeDq23No=
Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=beta; h=received:message-id:date:from:to:subject:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; b=TNJTFFigZ1tnTPVAu6M1tioQrLZGVslycdvo7kR4c3uBHBdS4UC9uhTNQyfhsjprFZE9SeShD5w5zrwcxL3MG16CA9lySf6Zl5jIYXwzpMAnz0S121a+X5ACWda/hdaXkLCV4d8qG6+I0qa5u43iVhxXeSwsx7og0K8u3pYHReg=
In-reply-to: <20070527091137.27135.qmail@securityfocus.com>
List-help: <mailto:pen-test-help@securityfocus.com>
List-id: <pen-test.list-id.securityfocus.com>
List-post: <mailto:pen-test@securityfocus.com>
List-subscribe: <mailto:pen-test-subscribe@securityfocus.com>
List-unsubscribe: <mailto:pen-test-unsubscribe@securityfocus.com>
Mailing-list: contact pen-test-help@securityfocus.com; run by ezmlm
References: <20070527091137.27135.qmail@securityfocus.com>
Resent-date: Tue, 29 May 2007 19:25:45 -0600 (MDT)
Resent-from: pen-test-return-1078484268@securityfocus.com
Resent-message-id: <20070530012545.7F3D7143731@outgoing2.securityfocus.com>
Resent-sender: listbounce@securityfocus.com
Sender: listbounce@securityfocus.com
Hello Juanbabi,
Nessus is one of the best alternative to exploit frontpage extensions.
The other alternative to give a try is Metasploit.

--
Nikhil Wagholikar
Security Analyst


NII Consulting
Web: www.niiconsulting.com
On 27 May 2007 09:11:37 -0000, juanbabi@yahoo.com <juanbabi@yahoo.com> wrote:
Hi,


in doing a pen test on a web server, the scanner found those urls:

status 403 http://www.domain.com/_vti_bin/

status 200 http://www.domain.com/_vti_inf.html

status 403 http://www.domain.com/inc/

status 301 http://www.domain.com/images/

status 301 http://www.domain.com/faq


FrontPage Configuration Information

   FPVersion="5.0.2.6790"

   FPShtmlScriptUrl="_vti_bin/shtml.dll/_vti_rpc"

   FPAuthorScriptUrl="_vti_bin/_vti_aut/author.dll"

   FPAdminScriptUrl="_vti_bin/_vti_adm/admin.dll"

   TPScriptUrl="_vti_bin/owssvr.dll"





Any idea how I can exploit those url or abuse them?


thanks a lot !


Juan

------------------------------------------------------------------------
This List Sponsored by: Cenzic

Are you using SPI, Watchfire or WhiteHat?
Consider getting clear vision with Cenzic
See HOW Now with our 20/20 program!

http://www.cenzic.com/c/2020
------------------------------------------------------------------------



------------------------------------------------------------------------
This List Sponsored by: Cenzic

Are you using SPI, Watchfire or WhiteHat?
Consider getting clear vision with Cenzic
See HOW Now with our 20/20 program!

http://www.cenzic.com/c/2020
------------------------------------------------------------------------


<Prev in Thread] Current Thread [Next in Thread>