Iis6 parsing vulnerability
Directory resolution:
Form: / 8090sec.asp/8090sec.jpg
8090.sec.asp is a folder, 8090sec.jpg is an asp*** file with a suffix to jpg format, 8090sec.jpg can be replaced with any text file (e.g. 8090sec.txt), and IIS6.0 parses 8090sec.jpg to asp files.
Suffix resolution
IIS6.0 will successfully parse this kind of suffix file into asp file either / 8090sec.aspter.jpg or / 8090sec.asp:.jpg (you need to change the file name here).
. Default resolution
/ 8090sec.asa / 8090sec.cer / 8090sec.cdx, the default executable file for IIS6.0 contains these three types in addition to asp
07. You can contact here to exploit directory parsing vulnerabilities / 8090sec.asa/8090sec.jpg or / 8090sec.cer/8090sec.jpg or 8090sec.asater.jpg
