is there a file or anyway to secure an iismedia hack?

yea there is but i got a question how did you exec. the file? since you only got a guest account.

i dont have a guest account....what do u mean a guest account?

i think he mean you got guest account on the shell of the machine you hacked...

Most of the machines allow to guests to exec commands...i didn't had any problems with that

it isnt a guest account it is full ax to the hd and i have admin rights all i need to know is how to secure an iismedia server

hmmm, i hadnt before full admin rights on a wms. how u did it? normal telnet connect on 34816? or with a prog?

yes normal telnet on that port and when u start ur serv-u u should get admin rights but the only think is winnt isw copywrite protected that is the only draw back of it but u do have admin in serv-u just cant write to winnt

but not full admin rights or do u can delete anything form c:\winnt\system32\...

ok about 90% of the people who cant get admin rights are tryin to exe their stuff in winnt/sys32/.

iis media does not work in the windows/winnt folders..
Try these two places: c:\recycler\ or c:\inetpub or any subdir of those and u should be fine, otherwise move on.

-Btw would some1 please share or redirect me to where that .exe is that secures iis media? thanks.

spawn543 is right....

i usualy make folders like /temp/windowsupdate..something like that...

yeah i dont take the path in the windir, ...

here is the secure patch for windows 2000 servers ..

http://download.microsoft.com/download/c/6...772-x86-ENU.exe

hope you now can secure your servers!

no, its a pitty ;(

yea..it really is too bad

if you can't secure a server because of to less prevelege, try an prevelige escalation exploit. most machins aren't patched against it. sorry don't know how to spell previlige...

these old progs like pipeadmin or getadmin are so old that they are fixed by a sp.

Is there any privilege escalation tool ?. I had lot of shells on Media with access to C:\winnt\ but I haven't got full admin rights eventually . It's little fourious because usually Media are rehacked !. Please write Step by Step tutorial if you know the answer.

There is a tool called getadmin.exe, but its very old and wont work

You can intsall Netcat on port 34816 and connectet it with your serv-u or other than can anybody conenct over that port.

The Storm - ROFLT

I know how to secure my stro but if I don't secure Media exploit hole anybody would be able to connect to my stro by Media hole and he may delete my files / make my stro's down !

I'm talking about way to secure Media IIS hole not stro !