PoC-CVE-2000-0649

PoC-CVE-2000-0649 一个用于为 CVE-2000-0649 创建 PoC 的小工具。 用法 此脚本用于验证服务器是否存在 CVE-2000-0649 漏洞。请注意尝试 HTTP、HTTPS 以及不同的路径。根据我的经验，信息泄露大多发生在通过 HTTP 连接并使用默认路径 '/' 或 '/images' 时。 你需要提供主机/IP 地址和端口。默认情况下路径设置为 '/'。你也可以选择性地指定以 '/' 开头的路径。 root@kitploit: $ python3 cve-2000-0649.py -host hostname -port port -path path...

Microsoft IIS HTTP Internal IP Disclosure

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Microsoft IIS HTTP Internal IP Disclosure', 'Description' = %q Collect any leaked internal IPs by requesting commonly redirected locations from...

Microsoft IIS HTTP Internal IP Disclosure

Collect any leaked internal IPs by requesting commonly redirected locations from IIS. CVE-2000-0649 references IIS 5.1 win2k, XP and older. However, in newer servers such as IIS 7+, this occurs when the alternateHostName is not set or misconfigured. Also collects internal IPs leaked from the...

CVE-2000-0649

CVE-2000-0649 describes an HTTP internal IP disclosure in IIS 4.0: an attacker can obtain the server’s private IP by requesting a page protected with Basic Authentication (no realm) via HTTP/1.0. Connected documents (Metasploit IIS_INTERNAL_IP module, Nessus/Nessus-like plugin, OpenVAS NASL) corr...