New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

IIS App Pool Identity exploit #102

Open

tparnell90 opened this issue Oct 15, 2020 · 0 comments

Labels

new entry suggestion

tparnell90 commented Oct 15, 2020

%windir%\system32\inetsrv\appcmd list apppool /config /xml > c:\apppools.xml

Can leak app pool identity credentials, if allowed to run appcmd and IIS has apppools configured as SpecificUser

example of the output:

Not sure if this would be a fit for this project.

wietze added the new entry suggestion label

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment