RE: IIS & w2k

If you're after a MS SQL server, check out http://www.sqlsecurity.com/

-----Original Message-----
From: Luis Javier Perez [mailto:lperez_at_scitum.com.mx]
Sent: Monday, June 04, 2001 10:49 AM
To: pen-test_at_securityfocus.com
Subject: IIS & w2k

Hi everyone.

I'm actually doing a pt, and i'm facing a trouble, the scenario has a web
server with w2k and iis 5.0, now i have put netcat listening on port 99 and
i can browse files and stuff like that but i need to scale privileges, i
tried hk but it fails.. is there something like hk for win2k???
With the info i collected i noticed the server connects with a sql server..
how can i do to exploit the sql..

any help would be appreciated..

thanks..
Received on Jun 04 2001