Tagged Questions
3
votes
2answers
363 views
How to counter or fix banner grabbing vulnerability
During an audit i came across banner grabbing findings,and would like to know how to mitigate that on IIS and apache server.
3
votes
2answers
242 views
Hide web.xml file from public view
I have found a vulnerability in a sun java application where the web.xml file is publicly viewable as the application is not using any .htaccess nor web.config.
I don't how to restrict. I tried with ...
1
vote
1answer
411 views
How to fix the audit failure in our web server
We noticed that we are getting the following audit failure logs in our web server. The workstation is not in our network.
Can anybody help me how to isolate and prevent this from happening?
An ...
1
vote
1answer
677 views
IIS password protected website
I have a website built upon windows IIS and to use password to protect the website and disable anonymous logon to that website, the ONLY way is to disable the anonymous logon in IIS and use a windows ...
0
votes
1answer
261 views
Iframe hack / done through FTP?
On two websites which I host for a friend, I found that there is an iframe at the bottom of each site's index.htm file.
<iframe src="http://www.kunstsalen.dk" width=1 height=1
style="visibility: ...
5
votes
3answers
347 views
How to respond to attack made from my dedicated server?
There was a sudden unusual peak of outbound traffic from my hosted dedicated server (OS - Windows Server 2008 R2). The hoster threatened to block the server if the problem is not solved.
There are an ...
4
votes
2answers
263 views
how unsafe is it for Windows webserver IIS to have domain privileges
Normally in the past, I've managed that the production server only serves http(s) to the internet, and is isolated from it's database by a firewall which only allows database queries to travel. ...
1
vote
2answers
646 views
Protecting an IIS web site hosted at home
My case is
I just registered at dyndns.com to get a domain for a website I am staging on my home computer (I know it's not considered good to do so). But the website is not big, and I don't expect to ...
