Microsoft CVE-2017-7269 WebDAV Remote Code Execution Vulnerability

关键词

IIS 6.0 WebDAV Remote Code Execution
CVE-2017-7269

除了这个漏洞外
IIS 6 还有一个在过去很常见的问题
WebDAV功能开启PUT方法允许任意用户上传文件，可能导致代码执行。

参考资料

https://www.rapid7.com/db/vulnerabilities/msft-cve-2017-7269

https://thief.one/2017/03/29/IIS6-0%E8%BF%9C%E7%A8%8B%E5%91%BD%E4%BB%A4%E6%89%A7%E8%A1%8C%E6%BC%8F%E6%B4%9E-CVE-2017-7269/

http://hacktech.cn/2017/04/01/iis6-0-cve-2017-7269.html

WebDAV PUT上传漏洞

如何判断是否开启WebDAV

https://blog.skullsecurity.org/2009/webdav-detection-vulnerability-checking-and-exploitation

https://isc.sans.edu/forums/diary/IIS+admins+help+finding+WebDAV+remotely+using+nmap/6436/

反弹shell批量管理
https://github.com/WangYihang/Reverse-Shell-Manager