Privilege escalation from IIS AppPool to NT Authority/SYSTEM
8 points by hoistbypetard
8 points by hoistbypetard
I've never enjoyed IIS. the more I learn about it, I like it even less
I was never a big fan, but the separation they introduced with AppPool initially seemed like a good thing, and was not initially easily replicable in Linux. This seems to eat its best feature.
The appPool idea is actually very interesting, though in practice i see a lot of dumping everything into the default app pool