I have set up IIS 6.0 on a virtual machine running a fully patched evaluation version of Windows Server 2003 and I set some ridiculously wide open permissions on the folder and whipped up an ASP.NET application that lets an anonymous user upload any file to the wwwroot directory. I have verified that I was able to upload cmd.exe and nc.exe to the wwwroot directory.
The problem is, I can't seem to do anything with those files that I uploaded. I have made sure that everyone has execute permission on the wwwroot folder, but I still can't seem to get a reverse shell. I can't even seem to get a directory listing. I tried putting this into my browser:
but I keep getting a page cannot be displayed error. I also tried:
which also hasn't worked. Does anyone know IIS well enough to tell me what I've done wrong here? Is there some setting that I haven't opened up so that the web server can run the exe? Is there something wrong with the http request that I've sent to the server?