Sam File via IIS flaw

From: nordicsmak@yahoo.com
Date: Tue Jun 28 2005 - 15:02:54 EDT

('binary' encoding is not supported, stored as-is) During a recent penetration test I've discovered a flaw in the IIS server that allows me to browse to and view any file on the system.

I'm able to browse to the /winnt/repair/sam file, but it obviously is unusable in the format that's presented in the browser.

Any way to get this file in a format that can be used in L0pht?

Thanks,
Chris

This archive was generated by hypermail 2.1.7 : Sat Apr 12 2008 - 10:54:30 EDT