Browse IIS Directory Structures

This article contains the complete project for an ISAPI Extension for exploring Web Servers with Microsoft Internet Information Server running.

Very often, such servers are not properly configured, so, system dlls like ISAPI Extensions are allowed to view the contents of each drive, including CDROM and other removeable drives.

Just open the project, compile it and upload the DLL to the WebServer of your choice. Obviously, take care that the server is running IIS. Then using your browser, enter the URL of the ISAPI Extension. The ISAPI Extension will read the directory of the server (if it is not protected by the operating system) and allow you to view it's contents as a HTML web page. The icons which you can see are stored on www.signale.co.at, because at this time I am not able to send the images while sending the HTML page to the Client via ISAPI.

For suggestions mail me or visit my Web site.

Downloads

Download source - 11 Kb


Comments

  • Please advice in removing isapi extensions

    Posted by Ioana on 04/15/2014 06:33am

    Hello, I have done the following: DirectoryEntry service = new DirectoryEntry("IIS://Localhost/W3SVC"); service.Invoke("DeleteExtensionFileRecord", appFile); where appfile is websiteName\BIN\ name.dll On the line where I call Invoke with the method DeleteExtensionFileRecord it throws an exception. Im doing something wrong..but what? Thank you.

    Reply
  • canonicalize url containing "%Uxxxx"

    Posted by Legacy on 06/05/2002 12:00am

    Originally posted by: jellad tarek

    Hi
    
    

    I'm coding with VC++ 6.0 a ISAPI filter to scan an URL
    so i must canonicalize it(put it in canonical form).
    there is many functions that canoniclize a url with VC++
    like : UrlCanonicalize(),WinHttpCrackUrl(), InternetCanonicalizeUrl(),UrlUnescape(),....
    but they can't decoding the "%Uxxxx" they decode only "%xx"
    (xx the hexa code of the caracter)
    so please if you can help me!

    good bye

    Reply
  • Question

    Posted by Legacy on 03/31/2002 12:00am

    Originally posted by: Armuzi

    I want to call a function of ISAPI dll,
    like<form action="MyIsa.dll?MyFunc"...
    so if I use IIS ,where should I put it.
    A book says I should put it \LM\W3SVC, but I can't find
    it

    Reply
  • Anyone having problems impersonating in an ISAPI filter??

    Posted by Legacy on 07/10/2001 12:00am

    Originally posted by: jim

    Hi..


    Im currently tring to impersonate on the OnUrlMap event within an ISAPI filter.
    I need to do this to list a remote directory via an NT share.
    I have tried the 'ImpersonateLoggedOnUser(token)' call, and also the SetThreadToken(handle,token).
    When performing a GetCurrentUser, I receive the username of the NT user I tried to impersonate, however I still have no access to the share. I get Error 5 Access denied from the FindFirstFile API.

    I have enabled all necessary rights on the local security policy to allow interactive logon, and act as part of the operating system. Both the LogonUser and ImpersonateLoggedOnUser return TRUE, and the handle is valid.

    I presumed that the thread calling the filter had some privileges disabled, but after listing the thread tokens privs, I realised that it had the LocalSystem rights (ALL privs)

    Please please please, does anyone have any ideas???

    thanks

    Jim

    Reply
  • Question.

    Posted by Legacy on 04/25/2001 12:00am

    Originally posted by: Shadan

    when i am compling isapiexplore.dll it is giving following error, how to correct it

    LINK : LNK4073: cannot create map for .ILK file; linking nonincrementally
    LINK : fatal error LNK1104: cannot open file "//DEV_SERVER/C/inetpub/scripts/msvc/IsapiExplorer.dll"

    Reply
  • browse iis directory structure

    Posted by Legacy on 04/12/2001 12:00am

    Originally posted by: umanath

    when i am compling isapiexplore.dll it is giving following error, how to correct it

    LINK : LNK4073: cannot create map for .ILK file; linking nonincrementally

    Reply
Leave a Comment
  • Your email address will not be published. All fields are required.

Top White Papers and Webcasts

  • Stories about devastating cyberattacks are plaguing the news. Why? The DNS protocol is easy to exploit. See your network the way hackers do—as an easy target. Learn how you can effectively secure your DNS infrastructure today.

  • Targeted attacks and advanced threats are customized to infiltrate your unique IT infrastructure, evade conventional defenses, and remain hidden while stealing your corporate data. To detect these criminal intrusions, analysts and security experts agree that organizations should deploy advanced threat protection as part of an expanded security monitoring strategy. For this comparative analysis of breach detection systems, product analysis reports and comparative analysis reports are used to create the security …

Most Popular Programming Stories

More for Developers

Latest Developer Headlines

RSS Feeds