MS10-065 Microsoft IIS 5 NTFS Stream Authentication Bypass
This module bypasses basic authentication for Internet Information Services (IIS). By appending the NTFS stream name to the directory name in a request, it is possible to bypass authentication.
Module Name
auxiliary/admin/http/iis_auth_bypass
Authors
- Soroush Dalili
- sinn3r <sinn3r [at] metasploit.com>
References
Reliability
Development
Module Options
To display the available options, load the module within the Metasploit console and run the commands 'show options' or 'show advanced':
msf > use auxiliary/admin/http/iis_auth_bypass
msf auxiliary(iis_auth_bypass) > show actions
...actions...
msf auxiliary(iis_auth_bypass) > set ACTION <action-name>
msf auxiliary(iis_auth_bypass) > show options
...show and set options...
msf auxiliary(iis_auth_bypass) > run