vanishedpeople/cve-2017-7269
Internet Information Services (IIS) is a flexible, general-purpose web server from Microsoft that runs on Windows systems to serve requested HTML pages or files. An IIS web server accepts requests from remote client computers and returns the appropriate response. This basic functionality allows web servers to share and deliver information across local area networks (LAN), such as corporate intranets, and wide area networks (WAN), such as the Internet.
Is a line of Microsoft operating systems (OSes) comprised of extremely powerful machines. Windows Server was first launched in April 2003. It’s typically installed on heavy-use servers serving as a backbone for most IT companies, applications, and services. The server handles the administrative group-related activities on a network. It organizes, stores, sends, and receives files from devices connected to a network.
WebDAV, or Web Distributed Authoring and Versioning, enhances HTTP to allow users to manage and edit files on a web server collaboratively. It supports file sharing, editing, and versioning directly through a web interface, offering a more collaborative and firewall-friendly alternative to FTP. WebDAV facilitates in-place file editing, making it ideal for team projects.
This script performs a Buffer Overflow Attack using ScStoragePathFromUrl function in the WebDAV service in Internet Information Services (IIS) 6.0 in Microsoft Windows Server 2003 R2.
This PoC was tested on Granny/Grampa CTF machines in the hack the box platform.
python3 exploit.py <RHOST> <RPORT> <LHOST> <LPORT> [-v]
Where v is the verbose parameter, which will display debug trails.
CVE Discoverers: Zhiniang Peng & Chen Wu.