Lost Password? No account yet? Register
Home

Introduction to scripting in Excel

 I have only recently discovered that I could create Excel spreadsheets using VBScript scripts, but I knew I could embed tabs into my output and import tab-delimited files into Excel....

Read more..

Scripting Excel Part 1

Over the years, I’ve written numerous VBScript scripts that used Excel for different purposes. I’ve found myself searching for segments of code from previously written scripts to reuse in my...

Read more..

Practical Scripting Part 1: The Basics

Being able to automate daily administration tasks using scripts can make the life of an admin a lot easier. But why learn to script? Aren't there hundreds of scripts you...

Read more..

Practical Scripting Part 2: Cleaning Up

Last month I began a new series of articles here on WindowsNetworking.com intended to demonstrate how to manage different aspects of Windows networks using scripts. The first article introduced some...

Read more..

Managing Windows Networks Using Scripts - Part 1: The Basics

Being able to automate daily administration tasks using scripts can make the life of an admin a lot easier. But why learn to script? Aren't there hundreds of scripts you...

Read more..

Managing Windows Networks Using Scripts - Part 2: Cleaning Up

The first article introduced some basic scripting concepts like objects, methods, and properties, and the goal of the article was to write a simple script that changed the IP address...

Read more..
100%
-
+
6
Show options
A remotely exploitable code execution vuln in IIS PDF Print E-mail
Written by David Noel-Davies   
Thursday, 13 March 2008
MS08-006 is a treat we haven't had in a while: a remotely exploitable code execution vuln in IIS. To be fair, the remotely exploitable part requires that an ASP script be written in such a way that it allows user supplied input to be passed to a vulnerable function. That said, it is still pretty cool.

HD Moore has a great write up detailing how he reverse engineered the MS08-006 patch using IDA Pro & BinDiff to find the actual vulnerability. I'm sure a handful of people out there have done the same, but it is pretty cool to see a blow by blow account of how it is actually done.

 
Next >

Who's Online

News Letter

Monthly Updates Receive HTML?