News for hackers. Stuff that matters.

A comment on Remote Kernel Code Execution Via HTTP Request In IIS On Windows. Parent comment

Re:Remote Kernel Code Execution Via HTTP Request In IIS On W... by Khao on Wednesday April 15, 2015 @10:52AM (#9381326)
Even if you have Kernel Caching enabled (as it is by default) if you haven't created any rule for it you're safe.

I created a rule to cache all .png files and I changed the curl request to request a .png image on the server. I got a BSOD!

[ Parent | on HN ]
Re:Remote Kernel Code Execution Via HTTP Request In IIS On W... by trentnelson on Wednesday April 15, 2015 @11:06AM (#9381425)
Do you remember what the fault being reported on the BSOD was?

(If you could take a screenshot/snapshot that'd be great.)

I'm really curious to see what bugcheck is being hit.

[ Parent | on HN ]
Re:Remote Kernel Code Execution Via HTTP Request In IIS On W... by davman on Wednesday April 15, 2015 @11:47AM (#9381729)
I just get the standard "Your PC ran into a problem and needs to restart. We're just collecting some error info, and then we'll restart for you."

Edit:

Actually sometimes you get additional info:

http://imgur.com/zRHUV8o

[ Parent | on HN ]
Re:Remote Kernel Code Execution Via HTTP Request In IIS On W... by trentnelson on Wednesday April 15, 2015 @04:03PM (#9383679)
Ah, page fault in non-paged area! Interesting.
[ Parent | on HN ]
Re:Remote Kernel Code Execution Via HTTP Request In IIS On W... by Ash-k on Wednesday April 15, 2015 @11:15AM (#9381487)
I second that.. If you could provide a screenshot and Curl example it would be great.
[ Parent | on HN ]
Re:Remote Kernel Code Execution Via HTTP Request In IIS On W... by eqkosch on Wednesday April 15, 2015 @11:05AM (#9381417)
Can you please provide example of CURL syntax you used to produce this please?
[ Parent | on HN ]
Re:Remote Kernel Code Execution Via HTTP Request In IIS On W... by eqkosch on Wednesday April 15, 2015 @11:24AM (#9381552)
Thanks my syntax was slightly off I'm now able to reproduce.
[ Parent | on HN ]
Re:Remote Kernel Code Execution Via HTTP Request In IIS On W... by Khao on Wednesday April 15, 2015 @11:16AM (#9381492)
Specifically after enabling Output Caching for all .png files I send this :

curl -v http://example.com/image.png -H "Range: bytes=18-18446744073709551615"

[ Parent | on HN ]
Re:Remote Kernel Code Execution Via HTTP Request In IIS On W... by tracker1 on Wednesday April 15, 2015 @01:11PM (#9382455)
I was able to crash mine (local win8.1 and win2012 server) without any rules specified, only the checkbox enabled for kernel caching... it may vary based on windows version.
[ Parent | on HN ]