These two days have been looking at the problem of IIS metabase, and found a small problem:
On the Windows operating system installed with IIS, there will be two more Windows users, one is the IUSER_ machine name, the other is the WAM_ machine name
These two are standard Windows users, subordinate to the Guest group, and passwords are randomly assigned by the system.
We know that Windows user information is stored in more than one place, but it seems that we have no way of knowing a user's password. As an example
, I am the Administrator account, with the largest permissions, and another user cqq, but I do not know his password,
So although we can modify CQQ's password, we don't know Cqq's original password.
However, for these two users of IIS, their user information is also stored in the IIS metabase and is saved in clear text. IIS Metabase
Is where IIS configuration information is saved, I'm looking at this information for two days because I'm going to write a backup Restore tool for IIS configuration information.
With Microsoft's Adsutil.vbs script, we can view all the information in the IIS metabase, which can be
C:inetpubadminscripts find (specifically, the root directory of your machine when you install IIS).
Open the DOS window and enter cscript iis.vbs enum w3svc carriage return, and we'll see a bunch of information about the Web site,
There are two items in it:
AnonymousUserName: (STRING) "IUSR_CQQ"
AnonymousUserPass: (STRING) "**********"
WAMUserName: (STRING) "IWAM_CQQ"
WAMUserPass: (STRING) "**********"
Everyone can see what it means, but in the Adsutil.vbs script, Microsoft has handled the code, not directly
Display, you can modify the Adsutil.vbs to let the password display directly, the results are as follows:
AnonymousUserName: (STRING) "IUSR_CQQ"
AnonymousUserPass: (STRING) "Gtui*zitye 9Ag"
WAMUserName: (STRING) "IWAM_CQQ"
WAMUserPass: (STRING) "5prrfMqixW) 4Fr"
In addition, I also directly made a small program to display this information, modified adsutil.vbs and I do the program can be found here
The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion;
products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the
content of the page makes you feel confusing, please write us an email, we will handle the problem
within 5 days after receiving your email.
If you find any instances of plagiarism from the community, please send an email to:
info-contact@alibabacloud.com
and provide relevant evidence. A staff member will contact you within 5 working days.