Iis|window has been looking at the problem of IIS metabase for two days and found a small problem:
On the Windows operating system installed with IIS, there will be two more Windows users, one is the IUSER_ machine name, the other is the WAM_ machine name
These two are standard Windows users, subordinate to the Guest group, and passwords are randomly assigned by the system.
We know that Windows user information is stored in more than one place, but it seems that we have no way of knowing a user's password. As an example
, I am the Administrator account, with the largest permissions, and another user cqq, but I do not know his password,
So although we can modify CQQ's password, we don't know Cqq's original password.
However, for these two users of IIS, their user information is also stored in the IIS metabase and is saved in clear text. IIS Metabase
Is where IIS configuration information is saved, I'm looking at this information for two days because I'm going to write a backup Restore tool for IIS configuration information.
With Microsoft's Adsutil.vbs script, we can view all the information in the IIS metabase, which can be
C:\Inetpub\AdminScripts find (specifically, the root directory of your machine when you install IIS).
Open the DOS window and enter cscript iis.vbs enum w3svc carriage return, and we'll see a bunch of information about the Web site,
There are two items in it:
AnonymousUserName: (STRING) "IUSR_CQQ"
AnonymousUserPass: (STRING) "**********"
WAMUserName: (STRING) "IWAM_CQQ"
WAMUserPass: (STRING) "**********"
Everyone can see what it means, but in the Adsutil.vbs script, Microsoft has handled the code, not directly
Display, you can modify the Adsutil.vbs to let the password display directly, the results are as follows:
AnonymousUserName: (STRING) "IUSR_CQQ"
AnonymousUserPass: (STRING) "Gtui*zitye 9Ag"
WAMUserName: (STRING) "IWAM_CQQ"
WAMUserPass: (STRING) "5prrfMqixW) 4Fr"
In addition, I also directly made a small program to display this information, modified adsutil.vbs and I do the program can be found here
