IIS App Pool Identity exploit #102
Description
%windir%\system32\inetsrv\appcmd list apppool /config /xml > c:\apppools.xml
Can leak app pool identity credentials, if allowed to run appcmd and IIS has apppools configured as SpecificUser
example of the output:
Not sure if this would be a fit for this project.