View Windows user passwords through IIS metabase

Source: Internet
Author: User
Tags metabase
These two days have been looking at the problem of IIS metabase, and found a small problem:
On the Windows operating system installed with IIS, there will be two more Windows users, one is the IUSER_ machine name, the other is the WAM_ machine name
These two are standard Windows users, subordinate to the Guest group, and passwords are randomly assigned by the system.
We know that Windows user information is stored in more than one place, but it seems that we have no way of knowing a user's password. As an example
, I am the Administrator account, with the largest permissions, and another user cqq, but I do not know his password,
So although we can modify CQQ's password, we don't know Cqq's original password.
However, for these two users of IIS, their user information is also stored in the IIS metabase and is saved in clear text. IIS Metabase
Is where IIS configuration information is saved, I'm looking at this information for two days because I'm going to write a backup Restore tool for IIS configuration information.
With Microsoft's Adsutil.vbs script, we can view all the information in the IIS metabase, which can be
C:inetpubadminscripts find (specifically, the root directory of your machine when you install IIS).
Open the DOS window and enter cscript iis.vbs enum w3svc carriage return, and we'll see a bunch of information about the Web site,
There are two items in it:
AnonymousUserName: (STRING) "IUSR_CQQ"
AnonymousUserPass: (STRING) "**********"
WAMUserName: (STRING) "IWAM_CQQ"
WAMUserPass: (STRING) "**********"
Everyone can see what it means, but in the Adsutil.vbs script, Microsoft has handled the code, not directly
Display, you can modify the Adsutil.vbs to let the password display directly, the results are as follows:
AnonymousUserName: (STRING) "IUSR_CQQ"
AnonymousUserPass: (STRING) "Gtui*zitye 9Ag"
WAMUserName: (STRING) "IWAM_CQQ"
WAMUserPass: (STRING) "5prrfMqixW) 4Fr"
In addition, I also directly made a small program to display this information, modified adsutil.vbs and I do the program can be found here

Contact Us

The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion; products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the content of the page makes you feel confusing, please write us an email, we will handle the problem within 5 days after receiving your email.

If you find any instances of plagiarism from the community, please send an email to: info-contact@alibabacloud.com and provide relevant evidence. A staff member will contact you within 5 working days.

A Free Trial That Lets You Build Big!

Start building with 50+ products and up to 12 months usage for Elastic Compute Service

  • Sales Support

    1 on 1 presale consultation

  • After-Sales Support

    24/7 Technical Support 6 Free Tickets per Quarter Faster Response

  • Alibaba Cloud offers highly flexible support services tailored to meet your exact needs.