Soroush Dalili

  • Home
  • Blog
  • Bug Bounty Invites
  • Advisories
  • Contact
Back to Blog

IE7-8 drive list enumeration!

Iframe delay in loading the local drives in IE7 and IE8 can cause drive list enumeration!
Proof of Concept is available from this link:
http://0me.me/demo/ie_drive_enum/IE-drive-enum-demo.html

Cheers,
Soroush Dalili

This entry was posted in Security Posts

Creation date: March 5, 2010

Previous
Improve File Uploaders’ Protections – Bypass Methods- Rev. 1.0
Next
Microsoft IIS Semi-Colon Vulnerability

Share this article