Humiliating IIS servers for fun and jail time
110 points by denysvitali 4 hours ago | 17 comments
Lammy 2 hours ago
> IIS has a legacy behavior inherited from the old DOS 8.3 filename convention.
replyIs this exposing the underlying OS's behavior coupled with the fact that the IIS document root is `C:\Inetpub` by default? Eight-dot-three filenames are enabled by default on the C drive but disabled by default on all other drives on Windows 10/11:
PS> (Get-ItemProperty -Path 'HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion').DisplayVersion
24H2
PS> fsutil 8dot3name query C:
The volume state is: 0 (8dot3 name creation is ENABLED)
The registry state is: 2 (Per volume setting - the default)
Based on the above settings, 8dot3 name creation is ENABLED on "C:"
PS> fsutil 8dot3name query U:
The volume state is: 1 (8dot3 name creation is DISABLED)
The registry state is: 2 (Per volume setting - the default)
Based on the above settings, 8dot3 name creation is DISABLED on "U:"t1234s 52 minutes ago
Does anyone use IIS anymore?
replyqingcharles 26 minutes ago
Yeah, I regularly speak to folks still running IIS on Windows Server. There are a lot of old apps out there, sadly. Some really, really important ones.
replysytelus 2 hours ago
This is extremely well done design (at least on full desktop browsers). Amazing content as well.
replymopsi 2 hours ago
"Amazing" is a little generous for script kiddie stuff from the early 2000s.
replyThe author has yet to learn the extent to which civilization depends on people not being cunts to one another for no good reason.
Nothing makes me happier than knowing I've wasted hours of their time chasing their own tails.