site açığı

satukbugra46 · 29 Ağu 2012

GET /_vti_bin/_vti_aut/dvwssr.dll

Kod:

HTTP/1.1 404 Not Found

Content-Length: 1379

Content-Type: text/html

Server: Microsoft-IIS/6.0

X-Powered-By: ASP.NET

Date: Wed, 29 Aug 2012 11:33:15 GMT

Connection: close



<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">

<HTML><HEAD><TITLE>§ä¤£¨ì³o*Ó*¶*±</TITLE>

<**** HTTP-EQUIV="Content-Type" Content="text/html; charset=Big5">

<STYLE type="text/css">

  BODY { font: 9pt ·s²Ó©úÅé, ²Ó©úÅé, PMingLiU, MingLiU }

  H1 { font: 9pt ·s²Ó©úÅé, ²Ó©úÅé, PMingLiU, MingLiU }

  H2 { font: 9pt ·s²Ó©úÅé, ²Ó©úÅé, PMingLiU, MingLiU }

  A:link { color: red }

  A:visited { color: maroon }

</STYLE>

</HEAD><BODY><TABLE width=500 border=0 cellspacing=10><TR><TD>



<h1>§ä¤£¨ì³o*Ó*¶*±</h1>

±z©Ò*n§äªº*¶*±¥i¯à¤w¸g³Q²¾°£¤F¡A¥i¯à¬O¥¦ªº¦WºÙ¤w¸gÅÜ§ó¡A©Î¼È®ÉµLªk¨Ï¥Î¡C

<hr>

<p>½Ğ¹Á¸Õ°õ¦æ¤U¦C°Ê§@¡G</p>

<ul>

<li>½Ğ½T©w¦bÂsÄı¾¹ªººô§}¦C¤¤Åã¥Üªººô¯¸¦ì§}ªº«÷¦r¤Î®æ¦¡¥¿½T¡C</li>

<li>¦pªG±z¬O«ö¤F³sµ²¦Ó¨ì¹F³o*Ó*¶*±¡A½Ğ³sµ¸¨t²ÎºŞ²z*û¥H³qª¾¥L*Ì³o*Ó³sµ²ªº®æ¦¡¿ù»~¡C

</li>

<li>«ö¤@¤U [<a href="javascript:history.back(1)">¤W¤@*¶</a>] «ö¶s¡A¸Õ¸Õ¨ä¥Lªº³sµ²¡C</li>

</ul>

<h2>HTTP ¿ù»~ 404 - §ä¤£¨ìÀÉ®×©Î¥Ø¿ı¡C<br>ºô»Úºô¸ô¸ê°TªA°È (IIS)</h2>

<hr>

<p>§Ş³N¸ê°T (¨Ñ§Ş³N¤ä´©¤H*û¨Ï¥Î)</p>

<ul>

<li>²¾¦Ü <a href="http://go.microsoft.com/fwlink/?linkid=8180">Microsoft ²£«~¤ä´©ªA°È</a>¡A¨Ã¶i¦æ <b>HTTP</b> ¤Î <b>404</b> µ¥¦rªº¥DÃD·j´M¡C</li>

<li>¶}±Ò [IIS »¡©ú] (±z¥i¥H±q¡uIIS ºŞ²z*û (inetmgr)¡v¦s¨ú)¡A¨Ã·j´M¦WºÙ¬°¡u¯¸¥x³]©w¡v¡B¡u¤@¯ë¨t²ÎºŞ²z¤u§@¡v¤Î¡uÃö©ó¦Û*q¿ù»~°T®§¡vªº¥DÃD¡C</li>

</ul>



</TD></TR></TABLE></BODY></HTML>

Kod:

0000: 48 54 54 50 2F 31 2E 31 20 34 30 34 20 4E 6F 74   HTTP/1.1 404 Not
0010: 20 46 6F 75 6E 64 0D 0D 0A 43 6F 6E 74 65 6E 74    Found...Content
0020: 2D 4C 65 6E 67 74 68 3A 20 31 33 37 39 0D 0D 0A   -Length: 1379...
0030: 43 6F 6E 74 65 6E 74 2D 54 79 70 65 3A 20 74 65   Content-Type: te
0040: 78 74 2F 68 74 6D 6C 0D 0D 0A 53 65 72 76 65 72   xt/html...Server
0050: 3A 20 4D 69 63 72 6F 73 6F 66 74 2D 49 49 53 2F   : Microsoft-IIS/
0060: 36 2E 30 0D 0D 0A 58 2D 50 6F 77 65 72 65 64 2D   6.0...X-Powered-
0070: 42 79 3A 20 41 53 50 2E 4E 45 54 0D 0D 0A 44 61   By: ASP.NET...Da
0080: 74 65 3A 20 57 65 64 2C 20 32 39 20 41 75 67 20   te: Wed, 29 Aug 
0090: 32 30 31 32 20 31 31 3A 33 33 3A 31 35 20 47 4D   2012 11:33:15 GM
00A0: 54 0D 0D 0A 43 6F 6E 6E 65 63 74 69 6F 6E 3A 20   T...Connection: 
00B0: 63 6C 6F 73 65 0D 0D 0A 0D 0D 0A 3C 21 44 4F 43   close......<!DOC
00C0: 54 59 50 45 20 48 54 4D 4C 20 50 55 42 4C 49 43   TYPE HTML PUBLIC
00D0: 20 22 2D 2F 2F 57 33 43 2F 2F 44 54 44 20 48 54    "-//W3C//DTD HT
00E0: 4D 4C 20 34 2E 30 31 2F 2F 45 4E 22 20 22 68 74   ML 4.01//EN" "ht
00F0: 74 70 3A 2F 2F 77 77 77 2E 77 33 2E 6F 72 67 2F   tp://www.w3.org/
0100: 54 52 2F 68 74 6D 6C 34 2F 73 74 72 69 63 74 2E   TR/html4/strict.
0110: 64 74 64 22 3E 0D 0D 0A 3C 48 54 4D 4C 3E 3C 48   dtd">...<HTML><H
0120: 45 41 44 3E 3C 54 49 54 4C 45 3E A7 E4 A4 A3 A8   EAD><TITLE>§ä¤£¨
0130: EC B3 6F AD D3 AD B6 AD B1 3C 2F 54 49 54 4C 45   ì³o*Ó*¶*±</TITLE
0140: 3E 0D 0D 0A 3C 4D 45 54 41 20 48 54 54 50 2D 45   >...<**** HTTP-E
0150: 51 55 49 56 3D 22 43 6F 6E 74 65 6E 74 2D 54 79   QUIV="Content-Ty
0160: 70 65 22 20 43 6F 6E 74 65 6E 74 3D 22 74 65 78   pe" Content="tex
0170: 74 2F 68 74 6D 6C 3B 20 63 68 61 72 73 65 74 3D   t/html; charset=
0180: 42 69 67 35 22 3E 0D 0D 0A 3C 53 54 59 4C 45 20   Big5">...<STYLE 
0190: 74 79 70 65 3D 22 74 65 78 74 2F 63 73 73 22 3E   type="text/css">
01A0: 0D 0D 0A 20 20 42 4F 44 59 20 7B 20 66 6F 6E 74   ...  BODY { font
01B0: 3A 20 39 70 74 20 B7 73 B2 D3 A9 FA C5 E9 2C 20   : 9pt ·s²Ó©úÅé, 
01C0: B2 D3 A9 FA C5 E9 2C 20 50 4D 69 6E 67 4C 69 55   ²Ó©úÅé, PMingLiU
01D0: 2C 20 4D 69 6E 67 4C 69 55 20 7D 0D 0D 0A 20 20   , MingLiU }...  
01E0: 48 31 20 7B 20 66 6F 6E 74 3A 20 39 70 74 20 B7   H1 { font: 9pt ·
01F0: 73 B2 D3 A9 FA C5 E9 2C 20 B2 D3 A9 FA C5 E9 2C   s²Ó©úÅé, ²Ó©úÅé,
0200: 20 50 4D 69 6E 67 4C 69 55 2C 20 4D 69 6E 67 4C    PMingLiU, MingL
0210: 69 55 20 7D 0D 0D 0A 20 20 48 32 20 7B 20 66 6F   iU }...  H2 { fo
0220: 6E 74 3A 20 39 70 74 20 B7 73 B2 D3 A9 FA C5 E9   nt: 9pt ·s²Ó©úÅé
0230: 2C 20 B2 D3 A9 FA C5 E9 2C 20 50 4D 69 6E 67 4C   , ²Ó©úÅé, PMingL
0240: 69 55 2C 20 4D 69 6E 67 4C 69 55 20 7D 0D 0D 0A   iU, MingLiU }...
0250: 20 20 41 3A 6C 69 6E 6B 20 7B 20 63 6F 6C 6F 72     A:link { color
0260: 3A 20 72 65 64 20 7D 0D 0D 0A 20 20 41 3A 76 69   : red }...  A:vi
0270: 73 69 74 65 64 20 7B 20 63 6F 6C 6F 72 3A 20 6D   sited { color: m
0280: 61 72 6F 6F 6E 20 7D 0D 0D 0A 3C 2F 53 54 59 4C   aroon }...</STYL
0290: 45 3E 0D 0D 0A 3C 2F 48 45 41 44 3E 3C 42 4F 44   E>...</HEAD><BOD
02A0: 59 3E 3C 54 41 42 4C 45 20 77 69 64 74 68 3D 35   Y><TABLE width=5
02B0: 30 30 20 62 6F 72 64 65 72 3D 30 20 63 65 6C 6C   00 border=0 cell
02C0: 73 70 61 63 69 6E 67 3D 31 30 3E 3C 54 52 3E 3C   spacing=10><TR><
02D0: 54 44 3E 0D 0D 0A 0D 0D 0A 3C 68 31 3E A7 E4 A4   TD>......<h1>§ä¤
02E0: A3 A8 EC B3 6F AD D3 AD B6 AD B1 3C 2F 68 31 3E   £¨ì³o*Ó*¶*±</h1>
02F0: 0D 0D 0A B1 7A A9 D2 AD 6E A7 E4 AA BA AD B6 AD   ...±z©Ò*n§äªº*¶*
0300: B1 A5 69 AF E0 A4 77 B8 67 B3 51 B2 BE B0 A3 A4   ±¥i¯à¤w¸g³Q²¾°£¤
0310: 46 A1 41 A5 69 AF E0 AC 4F A5 A6 AA BA A6 57 BA   F¡A¥i¯à¬O¥¦ªº¦Wº
0320: D9 A4 77 B8 67 C5 DC A7 F3 A1 41 A9 CE BC C8 AE   Ù¤w¸gÅÜ§ó¡A©Î¼È®
0330: C9 B5 4C AA 6B A8 CF A5 CE A1 43 0D 0D 0A 3C 68   ÉµLªk¨Ï¥Î¡C...<h
0340: 72 3E 0D 0D 0A 3C 70 3E BD D0 B9 C1 B8 D5 B0 F5   r>...<p>½Ğ¹Á¸Õ°õ
0350: A6 E6 A4 55 A6 43 B0 CA A7 40 A1 47 3C 2F 70 3E   ¦æ¤U¦C°Ê§@¡G</p>
0360: 0D 0D 0A 3C 75 6C 3E 0D 0D 0A 3C 6C 69 3E BD D0   ...<ul>...<li>½Ğ
0370: BD 54 A9 77 A6 62 C2 73 C4 FD BE B9 AA BA BA F4   ½T©w¦bÂsÄı¾¹ªººô
0380: A7 7D A6 43 A4 A4 C5 E3 A5 DC AA BA BA F4 AF B8   §}¦C¤¤Åã¥Üªººô¯¸
0390: A6 EC A7 7D AA BA AB F7 A6 72 A4 CE AE E6 A6 A1   ¦ì§}ªº«÷¦r¤Î®æ¦¡
03A0: A5 BF BD 54 A1 43 3C 2F 6C 69 3E 0D 0D 0A 3C 6C   ¥¿½T¡C</li>...<l
03B0: 69 3E A6 70 AA 47 B1 7A AC 4F AB F6 A4 46 B3 73   i>¦pªG±z¬O«ö¤F³s
03C0: B5 B2 A6 D3 A8 EC B9 46 B3 6F AD D3 AD B6 AD B1   µ²¦Ó¨ì¹F³o*Ó*¶*±
03D0: A1 41 BD D0 B3 73 B5 B8 A8 74 B2 CE BA DE B2 7A   ¡A½Ğ³sµ¸¨t²ÎºŞ²z
03E0: AD FB A5 48 B3 71 AA BE A5 4C AD CC B3 6F AD D3   *û¥H³qª¾¥L*Ì³o*Ó
03F0: B3 73 B5 B2 AA BA AE E6 A6 A1 BF F9 BB 7E A1 43   ³sµ²ªº®æ¦¡¿ù»~¡C
0400: 0D 0D 0A 3C 2F 6C 69 3E 0D 0D 0A 3C 6C 69 3E AB   ...</li>...<li>«
0410: F6 A4 40 A4 55 20 5B 3C 61 20 68 72 65 66 3D 22   ö¤@¤U [<a href="
0420: 6A 61 76 61 73 63 72 69 70 74 3A 68 69 73 74 6F   javascript:histo
0430: 72 79 2E 62 61 63 6B 28 31 29 22 3E A4 57 A4 40   ry.back(1)">¤W¤@
0440: AD B6 3C 2F 61 3E 5D 20 AB F6 B6 73 A1 41 B8 D5   *¶</a>] «ö¶s¡A¸Õ
0450: B8 D5 A8 E4 A5 4C AA BA B3 73 B5 B2 A1 43 3C 2F   ¸Õ¨ä¥Lªº³sµ²¡C</
0460: 6C 69 3E 0D 0D 0A 3C 2F 75 6C 3E 0D 0D 0A 3C 68   li>...</ul>...<h
0470: 32 3E 48 54 54 50 20 BF F9 BB 7E 20 34 30 34 20   2>HTTP ¿ù»~ 404 
0480: 2D 20 A7 E4 A4 A3 A8 EC C0 C9 AE D7 A9 CE A5 D8   - §ä¤£¨ìÀÉ®×©Î¥Ø
0490: BF FD A1 43 3C 62 72 3E BA F4 BB DA BA F4 B8 F4   ¿ı¡C<br>ºô»Úºô¸ô
04A0: B8 EA B0 54 AA 41 B0 C8 20 28 49 49 53 29 3C 2F   ¸ê°TªA°È (IIS)</
04B0: 68 32 3E 0D 0D 0A 3C 68 72 3E 0D 0D 0A 3C 70 3E   h2>...<hr>...<p>
04C0: A7 DE B3 4E B8 EA B0 54 20 28 A8 D1 A7 DE B3 4E   §Ş³N¸ê°T (¨Ñ§Ş³N
04D0: A4 E4 B4 A9 A4 48 AD FB A8 CF A5 CE 29 3C 2F 70   ¤ä´©¤H*û¨Ï¥Î)</p
04E0: 3E 0D 0D 0A 3C 75 6C 3E 0D 0D 0A 3C 6C 69 3E B2   >...<ul>...<li>²
04F0: BE A6 DC 20 3C 61 20 68 72 65 66 3D 22 68 74 74   ¾¦Ü <a href="htt
0500: 70 3A 2F 2F 67 6F 2E 6D 69 63 72 6F 73 6F 66 74   p://go.microsoft
0510: 2E 63 6F 6D 2F 66 77 6C 69 6E 6B 2F 3F 6C 69 6E   .com/fwlink/?lin
0520: 6B 69 64 3D 38 31 38 30 22 3E 4D 69 63 72 6F 73   kid=8180">Micros
0530: 6F 66 74 20 B2 A3 AB 7E A4 E4 B4 A9 AA 41 B0 C8   oft ²£«~¤ä´©ªA°È
0540: 3C 2F 61 3E A1 41 A8 C3 B6 69 A6 E6 20 3C 62 3E   </a>¡A¨Ã¶i¦æ <b>
0550: 48 54 54 50 3C 2F 62 3E 20 A4 CE 20 3C 62 3E 34   HTTP</b> ¤Î <b>4
0560: 30 34 3C 2F 62 3E 20 B5 A5 A6 72 AA BA A5 44 C3   04</b> µ¥¦rªº¥DÃ
0570: 44 B7 6A B4 4D A1 43 3C 2F 6C 69 3E 0D 0D 0A 3C   D·j´M¡C</li>...<
0580: 6C 69 3E B6 7D B1 D2 20 5B 49 49 53 20 BB A1 A9   li>¶}±Ò [IIS »¡©
0590: FA 5D 20 28 B1 7A A5 69 A5 48 B1 71 A1 75 49 49   ú] (±z¥i¥H±q¡uII
05A0: 53 20 BA DE B2 7A AD FB 20 28 69 6E 65 74 6D 67   S ºŞ²z*û (inetmg
05B0: 72 29 A1 76 A6 73 A8 FA 29 A1 41 A8 C3 B7 6A B4   r)¡v¦s¨ú)¡A¨Ã·j´
05C0: 4D A6 57 BA D9 AC B0 A1 75 AF B8 A5 78 B3 5D A9   M¦WºÙ¬°¡u¯¸¥x³]©
05D0: 77 A1 76 A1 42 A1 75 A4 40 AF EB A8 74 B2 CE BA   w¡v¡B¡u¤@¯ë¨t²Îº
05E0: DE B2 7A A4 75 A7 40 A1 76 A4 CE A1 75 C3 F6 A9   Ş²z¤u§@¡v¤Î¡uÃö©
05F0: F3 A6 DB AD 71 BF F9 BB 7E B0 54 AE A7 A1 76 AA   ó¦Û*q¿ù»~°T®§¡vª
0600: BA A5 44 C3 44 A1 43 3C 2F 6C 69 3E 0D 0D 0A 3C   º¥DÃD¡C</li>...<
0610: 2F 75 6C 3E 0D 0D 0A 0D 0D 0A 3C 2F 54 44 3E 3C   /ul>......</TD><
0620: 2F 54 52 3E 3C 2F 54 41 42 4C 45 3E 3C 2F 42 4F   /TR></TABLE></BO
0630: 44 59 3E 3C 2F 48 54 4D 4C 3E 0D 0D 0A            DY></HTML>...

Merhaba Ben N-Stealth ile bir sitede "GET /_vti_bin/_vti_aut/dvwssr.dll" diye bir açık buldum risk seviyesi yüksek diyor bununla ne yapabilirim ?

-FOX- · 29 Ağu 2012

Güncel

Nok3 · 29 Ağu 2012

Bunlar ney ?

david becker · 29 Ağu 2012

acunetixlemi buldun neyle

Héraklés · 29 Ağu 2012

david becker' Alıntı:
acunetixlemi buldun neyle

N-Stealth

macirhan · 29 Ağu 2012

Üstadım ,

site açığı değildir, heyecan yapmayın

Bu muhtemelen, wordpress yada joomla benzeri, merdivenaltı baskı ile yapılmıi bir site. Bunu kuran mübarek biraz acemi olduğu için adı geçen kalsörün içini gizlemeyi unutmuş. Normalde bu gizli olması greken bir klasör. Merdivenaltı üretimi olan bu site, genel amaçlı olduğu için, windows ve linux gibi işletim sistemlerine kurulabilir şekilde tasarlanmış ve ne amaca hizmet edeceği önceden bilinmediği için içine bazen gereksiz olabilecek şeyler de konmuş. Buradaki olmayan dll dosyası gibi. 4xx hataları, aranan nesnenin yerinde olmadığını gösterir. Maalesef açık değillerdir.

İkinci şey ise, web sayfasının html kodu, sağ tıkla fare ile "kaynak kodunu görüntüle" deyince çıkan şey.

Üçüncü dalga ise, paket yakalama programı ile (muhtemelen wireshark yada tcpdump) networkte gidip gelen paketler yakalanmış. Paket yakalayıp okuyabilmek marifettir, zordur, forumda bunu bilen 2-3 kişi ancak vardır. Ama burada bir nane yok yakalanan paketlerde.

site açığı

satukbugra46

Katılımcı Üye

-FOX-

Kıdemli Üye

Nok3

Katılımcı Üye

david becker

Uzman üye

Héraklés

Özel Üye

macirhan

Katılımcı Üye

Sosyal medya sayfalarımız