CVE-2010-2731

This exploit describes a directory authentication bypass vulnerability in IIS using Alternate Data Stream (ADS) to circumvent authentication methods. The technique involves appending ':$i30:$INDEX_ALLOCATION' to a directory name to access protected folders.

This Metasploit module exploits an authentication bypass vulnerability in Microsoft IIS 5 by appending an NTFS stream name to the directory path, allowing unauthorized access to protected resources.