iis server hacking

What's the best way to setup a home network? Why should I care about BGP?

iis server hacking

Post by gban on Wed Jan 05, 2011 4:10 pm
([msg=51753]see iis server hacking[/msg])

I tried nc on my server and it opens but when I try to GET HTTP I get this:

C:\>nc -v -n "serverIP" 80
(UNKNOWN) ["SOME IP"] 80 (?) open
GET HTTP
HTTP/1.1 400 Bad Request ( The data is invalid. )
Via: 1.1 WALL
Connection: close
Proxy-Connection: close
Pragma: no-cache
Cache-Control: no-cache
Content-Type: text/html
Content-Length: 3992

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD><TITLE>Error Message</TITLE>
<META http-equiv=Content-Type content="text/html; charset=UTF-8">
<STYLE id=L_default_1>A {
FONT-WEIGHT: bold; FONT-SIZE: 10pt; COLOR: #005a80; FONT-FAMILY: tahoma
}
A:hover {
FONT-WEIGHT: bold; FONT-SIZE: 10pt; COLOR: #0d3372; FONT-FAMILY: tahoma
}
TD {
FONT-SIZE: 8pt; FONT-FAMILY: tahoma
}
TD.titleBorder {
BORDER-RIGHT: #955319 1px solid; BORDER-TOP: #955319 1px solid; PADDING-
LEFT: 8px; FONT-WEIGHT: bold; FONT-SIZE: 12pt; VERTICAL-ALIGN: middle; BORDER-LE
FT: #955319 0px solid; COLOR: #955319; BORDER-BOTTOM: #955319 1px solid; FONT-FA
MILY: tahoma; HEIGHT: 35px; BACKGROUND-COLOR: #d2b87a; TEXT-ALIGN: left
}
TD.titleBorder_x {
BORDER-RIGHT: #955319 0px solid; BORDER-TOP: #955319 1px solid; PADDING-
LEFT: 8px; FONT-WEIGHT: bold; FONT-SIZE: 12pt; VERTICAL-ALIGN: middle; BORDER-LE
FT: #955319 1px solid; COLOR: #978c79; BORDER-BOTTOM: #955319 1px solid; FONT-FA
MILY: tahoma; HEIGHT: 35px; BACKGROUND-COLOR: #d2b87a; TEXT-ALIGN: left
}
.TitleDescription {
FONT-WEIGHT: bold; FONT-SIZE: 12pt; COLOR: black; FONT-FAMILY: tahoma
}
SPAN.explain {
FONT-WEIGHT: normal; FONT-SIZE: 10pt; COLOR: #934225
}
SPAN.TryThings {
FONT-WEIGHT: normal; FONT-SIZE: 10pt; COLOR: #934225
}
.TryList {
MARGIN-TOP: 5px; FONT-WEIGHT: normal; FONT-SIZE: 8pt; COLOR: black; FONT
-FAMILY: tahoma
}
.X {
BORDER-RIGHT: #955319 1px solid; BORDER-TOP: #955319 1px solid; FONT-WEI
GHT: normal; FONT-SIZE: 12pt; BORDER-LEFT: #955319 1px solid; COLOR: #7b3807; BO
RDER-BOTTOM: #955319 1px solid; FONT-FAMILY: verdana; BACKGROUND-COLOR: #d1c2b4
}
.adminList {
MARGIN-TOP: 2px
}
</STYLE>
<META content="MSHTML 6.00.2800.1170" name=GENERATOR></HEAD>
<BODY bgColor=#f3f3ed>
<TABLE cellSpacing=0 cellPadding=0 width="100%">
<TBODY>
<TR>
<TD class=titleborder_x width=30>
<TABLE height=25 cellSpacing=2 cellPadding=0 width=25 bgColor=black>
<TBODY>
<TR>
<TD class=x vAlign=center align=middle>X</TD>
</TR>
</TBODY>
</TABLE>
</TD>
<TD class=titleBorder id=L_default_2>Network Access Message:<SPAN class=Titl
eDescription> The page cannot be displayed</SPAN> </TD>
</TR>
</TBODY>
</TABLE>

<TABLE id=spacer>
<TBODY>
<TR>
<TD height=10></TD></TR></TBODY></TABLE>
<TABLE width=400>
<TBODY>
<TR>
<TD noWrap width=25></TD>
<TD width=400><SPAN class=explain><ID id=L_default_3><B>Explanation:</B></ID
></SPAN><ID id=L_default_4> There is a problem with the page you are trying to r
each and it cannot be displayed. </ID><BR><BR>
<B><SPAN class=tryThings><ID id=L_default_5><B>Try the following:</B></ID></
SPAN></B>
<UL class=TryList>
<LI id=L_default_6><B>Refresh page:</B> Search for the page again by cli
cking the Refresh button. The timeout may have occurred due to Internet congesti
on.
<LI id=L_default_7><B>Check spelling:</B> Check that you typed the Web page addr
ess correctly. The address may have been mistyped.
<LI id=L_default_8><B>Access from a link:</B> If there is a link to the page you
are looking for, try accessing the page from that link.

</UL>
<ID id=L_default_9>If you are still not able to view the requested page, try con
tacting your administrator or Helpdesk.</ID> <BR><BR>
</TD>
</TR>
</TBODY>
</TABLE>

<TABLE id=spacer><TBODY><TR><TD height=15></TD></TR></TBODY></TABLE>

<TABLE width=400>
<TBODY>
<TR>
<TD noWrap width=25></TD>
<TD width=400 id=L_default_10><B>Technical Information (for support personne
l)</B>
<UL class=adminList>
<LI id=L_default_11>Error Code: 400 Bad Request. The data is invalid. (1
3)
<LI id=L_default_12>IP Address: "SOME IP"
<LI id=L_default_13>Date: 5.1.2011 19:56:41
<LI id=L_default_14>Server: "SOME ADDRESS"
<LI id=L_default_15>Source: proxy

</UL>
</TD>
</TR>
</TBODY>
</TABLE>

</BODY>
</HTML>
I DON'T KNOW WHAT IS THIS ! HELP ?????
gban
New User
New User
 
Posts: 2
Joined: Wed Jan 05, 2011 4:01 pm
Blog: View Blog (0)


Re: iis server hacking

Post by OnlyHuman on Wed Jan 05, 2011 6:28 pm
([msg=51758]see Re: iis server hacking[/msg])

If I'm reading this correctly, it looks like your GET request is malformed. It needs to specify both a resource, and a protocol version. With no resource, the server doesn't know what you're trying to GET. And with no version, it doesn't know how to give the resource back to you, when it finds out what it is that you want. I'm assuming you're attempting to get the default index? In that case, changing your request to look like so might help:

Code: Select all
GET / HTTP/1.1

In the above, the forward slash is synonymous with "server's default index page". Also, sometimes it's necessary to specify the host as well. Just provide the Host: parameter, followed by the domain name of the site you're connected to, before the two new lines. Turning the above into this:

Code: Select all
GET / HTTP/1.1
Host: the-host-website-domain-name-goes-here.com

That's all that immediately stands out. Also, this might come in handy -> rfc2616
Covers the details better than I ever could.
OnlyHuman
Poster
Poster
 
Posts: 191
Joined: Sat Aug 22, 2009 1:37 am
Blog: View Blog (0)


Re: iis server hacking

Post by gban on Wed Jan 05, 2011 6:47 pm
([msg=51759]see Re: iis server hacking[/msg])

Thank's
gban
New User
New User
 
Posts: 2
Joined: Wed Jan 05, 2011 4:01 pm
Blog: View Blog (0)



Return to Networking

Who is online

Users browsing this forum: No registered users and 0 guests