I am attempting to identify servers within our DMZ with read/write privileges granted to the IUSER account. Although I could write a quick script to get this information from servers in the domain, I want to see how difficult it would be to get this information from the outside. I know these privs should have never been granted in the first place and it was done by someone managing the web sites.

Does anyone know of a tool to test for IUSER read/write privs? Once upon a time, I had a tool that attempted to write a zero byte file to any directories on a web site that it could find; if it succeeded, it reported back that read/write privs were available at the "X" directory on the server. The trick is to find the sub-directories under the web site root folder and then see if read/write is enabled at that level. Any assistance would be greatly appreciated...

...aberration...