Questions tagged [iis]

Internet Information Services (IIS) is a web server application and set of feature extension modules created by Microsoft for use with Microsoft Windows.

Filter by
Sorted by
Tagged with
0 votes
0 answers
24 views

Subdomain vs Virtual Path discovery by bots

I have a website with a URL of lets say "123.example.com" where I am hosting a large ERP system. Does hosting the application at "123.example.com/myapp" provide any layer of ...
Freeman Helmuth's user avatar
0 votes
0 answers
7 views

How to deploy Gophish in a running IIS Server [migrated]

I am a beginner in Windows Server management. Currently, i have a VPS which already has a website running in IIS 10. Also have a domain which already point out to the Server's IP Address for that ...
Bang Fady's user avatar
0 votes
0 answers
29 views

How does this %2F attack work in IIS?

I'm reading this presentation https://drive.google.com/file/d/1aeNq_5wVwHRR1np1jIRQM1hocrgcZ6Qu/view?pli=1 And I couldn't understand page 48, The author didn't say much about it, does anyone know how ...
daisy's user avatar
  • 2,057
0 votes
1 answer
121 views

Random endpoint getting pinged constantly on my server [duplicate]

I've read bits around this, but I am curious should I be worried. I constantly am getting hit with random GET and POST requests from I guess just bots crawling the web trying to find vulnerabilities. ...
randomJSEngine's user avatar
2 votes
0 answers
40 views

Renew a web hosting certificate on IIS [closed]

I have a site published in IIS. The site using HTTPS protocol and the web hosting certificate is already expired. This web hosting certificate path is under the trust root certificate which is not ...
hud. 's user avatar
  • 21
0 votes
1 answer
161 views

Exploit user controllable C# code in webapp

The application in question offers the option to create arbitrary C# code and execute it at any time. These could be considered macros to customize certain tasks. Say that a normal user, who would ...
drazse's user avatar
  • 3
11 votes
3 answers
4k views

Why create a CSR on my own server to have it signed by a 3rd party?

I am looking into our current website certificate-management process and am looking for steps that may be unnecessary and can be simplified. The current process was created by our sysadmin who now ...
user2713516's user avatar
1 vote
0 answers
128 views

Why is it a security concern to modify http.sys registry entries to allow web service to accept a longer query string?

I have an Http web service running on IIS. The Http service will be exposed to the public internet, but only authenticated client requests will be processed by the web service. The service allows ...
hpatel's user avatar
  • 11
1 vote
4 answers
4k views

Which cipher is more secure TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA or TLS_RSA_WITH_AES_256_GCM_SHA384?

TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA supports forward secrecy but it doesn't use GCM mode and use SHA1 TLS_RSA_WITH_AES_256_GCM_SHA384 uses GCM mode and SHA2 but it doesn't support forward secrecy. ...
dawklrw's user avatar
  • 11
0 votes
1 answer
170 views

Common attack vectors for Microsoft Exchange Server?

What are the common attack vectors for a Microsoft Exchange Server? My online searches only yield discussion into various APT groups, and technical write-ups of different 0day exploits. There does not ...
questioner's user avatar
0 votes
1 answer
66 views

What's wrong with toggling detailed IIS errors for production?

What is the danger of setting IIS errorMode to detailed in webconfig? It helps me marginally with sanity checks on production, but it seems like it wouldn't really help a bad actor much. I'd like to ...
Robert Palmer's user avatar
2 votes
1 answer
351 views

API Sql Injection

I need some help with an SQL injection at an API. Webserver IIS 8.5 The GET request looks like this ... https://example.com/api/Search?q=Landing The Response looks like this HTTP/1.1 200 OK ... [{&...
Ricky's user avatar
  • 21
3 votes
3 answers
637 views

HttpResponse Headers Information Leakage on Server Error (Verbose Headers)

In the past I have dealt with security issues related to Default Service Banners/Verbose Headers/Information Leakage via HttpResponse Headers. These issues are quite common, and usually look ...
MattyMerrix's user avatar
0 votes
1 answer
960 views

Skip date check in Server certificate in Chrome

We have a web application on https port with server certificate valid from 01/01/2021 and valid to 31/12/2021. Due to some constraints the clients which are going to use web application are behind ...
SidD's user avatar
  • 101
2 votes
2 answers
843 views

Is this test enough to proof that the web application is vulnerable to Login CSRF?

SCENARIO: web application which I think is affected by: a self-xss in the profile section of a user. logout CSRF login CSRF Below I described the test I did to check for the last 2 vulnerabilities, ...
Maicake's user avatar
  • 567
1 vote
1 answer
123 views

php / email / iis

in a certain page I have a newsletter subscription form, where the user enters his e-mail address and then through PHP an authenticated e-mail is sent to myself with the user's information (e-mail ...
MirrorMirror's user avatar
0 votes
0 answers
174 views

SSRF - Internal network surfing

If an IIS web server exposes a site in INTERNET, is it possible for an attacker to access internal sites by simply modifying the host header of initial request to internet site and refer another host ...
David's user avatar
  • 5
0 votes
2 answers
359 views

Content-Type and Code Execution

I just got a message from a security guy that my application is executing remote code if they pass a Content-Type: image/asp. For now he does not disclose anything. Now my question is that if I am ...
Imran Qadir Baksh - Baloch's user avatar
1 vote
1 answer
2k views

Slow HTTP POST vulnerability in IIS 10

I ran a Qualys scan on my website and got a Slow HTTP POST vulnerability. In particular, server resets timeout after accepting request data from peer. From what I understood from this finding, ...
kknoted's user avatar
  • 11
0 votes
1 answer
3k views

TLS 1.2 and HTTPS [duplicate]

This question may be silly but I've a hard time understanding TLS 1.2 and accessing a website via HTTPS. I've received a report from a web security tool that my website is not HTTPS and I have to ...
Jay's user avatar
  • 1
1 vote
1 answer
184 views

An intranet web app for decrypting values : a bad idea, and if so, why?

We have to protect a database connection string for a .NET desktop application that has an application-level database user. One option is to encrypt a section of the app.config using asp_regiis. But ...
Tim's user avatar
  • 341
0 votes
1 answer
334 views

How to best limit SQL injection attacks that are being funneled through an Apache proxy I control

I use an Apache proxy to funnel traffic to an IIS server. The IIS server sends me emails if some bad actor attacks my site with an sql injection attack. It captures their IP address, and sends me the ...
MeSo2's user avatar
  • 105
1 vote
1 answer
2k views

How to make use of a exploit that is not available in metasploit? [closed]

I want to exploit a Microsoft IIS HTTPD 10.0 server open which is open in PORT 80. However there is no available exploits in Metasploit but there are few vulnerabilities in this site. Is it possible ...
Aeden Thomas's user avatar
1 vote
1 answer
446 views

Check the origin header server-wide in IIS to prevent CSRF through the IIS configuration change Only

Could you please let me know how can we check the origin header server-wide in IIS to prevent CSRF through the configuration change only without adding a custom HTTP module in IIS?
user1773981's user avatar
1 vote
0 answers
1k views

Active Directory authentication with a Login form ASP.NET MVC5

I want to create a web application with a login form and authenticate with Active Directory account. Our users sometimes use a device that users cannot log in, so we don't want to use Windows ...
kuma's user avatar
  • 11
1 vote
1 answer
419 views

IIS FTPS Best Practise

I have the task to place an FTP server in the company DMZ for our partners to store sensitive data that can not be sent by mail. I have chosen the IIS FTPS. I will generate a self-signed certificate ...
John's user avatar
  • 167
0 votes
1 answer
199 views

Detect vulnerability based on IIS log [closed]

Is there any tools to detect website vulnerability/suspicious request from IIS log? I was asked to do log review. The logs include IIS Log and Event Log. Is there any tools to detect if there's any ...
Pajri Aprilio's user avatar
3 votes
0 answers
251 views

What does IIS query string validation protect from?

Recently we had a failure in one of our systems because IIS rejects query strings with (URL encoded) parameter values containing the sequence &#. It doesn't reject & #. We've got tired of ...
Pete Kirkham's user avatar
0 votes
0 answers
513 views

Determining clients connecting to IIS using CBC ciphers. (preparing for Lucky13 remediation)

I am trying to determine the impact of re-mediating a lucky 13 vulnerability; which i understand requires disabling CBC cipher modes. So far i have added custom logging to my IIS instance to capture ...
MaCuban's user avatar
2 votes
2 answers
422 views

Secure AWS instance metadata against potential SSRF

I am running a Windows instance on AWS. The instance has an IIS service running on it. The IIS service has a user associated to it and it has no need to access the AWS instance metadata. I was ...
Raimonds Liepiņš's user avatar
6 votes
1 answer
536 views

Risk of allowing the string "xss" in query string

A former employee, put the following in our "global.axas" if (url.Contains("xss")){ response.StatusCode = 404; response.end(); } I get he was trying to prevent cross site scripting, but other than ...
mikemurf22's user avatar
0 votes
0 answers
104 views

How filter a GET parameter for a specific URL in IIS 10?

I have an openredirect vulnerability on my web application. You can learn about this with the following link: https://stackoverflow.com/questions/48340714/azure-ad-b2c-vulnerable-to-open-redirect ...
salt's user avatar
  • 259
1 vote
2 answers
2k views

Can I get an SSL certificate even if external DNS does not resolve

I have an intranet website that requires an SSL Certificate. From what I've seen it seems like this is difficult to accomplish or cumbersome. Would I be able to buy an SSL certificate if there is an ...
Jay P's user avatar
  • 11
1 vote
2 answers
190 views

IIS Application - service account permissions

My company is looking to install a 3rd party application on our infrastructure and this application will be installed on an IIS Server with a connection to a SQL server. They require an AD service ...
deltzy's user avatar
  • 237
1 vote
1 answer
1k views

It is possible to enumerate/discover IIS applications from outside?

I wonder if it is possible that someone, from the Internet, could be able to discover services provided via IIS by knowing only the IP address. If yes, how? And how can I protect my IIS from this ...
Roberto's user avatar
  • 21
2 votes
1 answer
733 views

How could ASP.NET forms authentication session leak into a different site?

We're dealing with a vulnerability where a forms authentication from one site can be used within a separate site. I can't figure out how is IIS or ASP.NET allowing this to occur Steps: Login to ...
user3280964's user avatar
  • 1,162
0 votes
0 answers
2k views

Windows Firewall blocking local access to SQL Server?

I have an AWS virtual machine running a web application on IIS that connects to a SQL Server database (on the same machine). Recently, I have noticed that there are a plethora of failed login attempts ...
Matthew's user avatar
  • 101
1 vote
2 answers
2k views

2-way SSL - is it possible to accept multiple client certs on one IIS site?

A client has asked us to build an API which requires two-way SSL. Will we be able to expose that same API to other clients with different certificates? Or will we have to set up a different endpoint ...
OutstandingBill's user avatar
2 votes
1 answer
385 views

Security Log Analyze [closed]

is there any tools that I give it web server log (like Apache web server) and analyze it if there was any attack or not? I don't want to use SIEM.
a.j's user avatar
  • 21
1 vote
1 answer
514 views

Deny access to IIS Server from IP local range

I have a local IIS 10 Server, this server runs a critical application. I want to deny access for this server from IP local network and allow only 2 or 3 IP-addresses. Additionally I want to log any ...
Joseph Watever J's user avatar
2 votes
0 answers
544 views

SSL Certificates and Private Key passhprases

I'm trying to put together a new PKI program for my company, and I'm a little turned around on the concept of Private Keys and passphrases. We'd like to implement Microsoft Active Directory ...
centre21's user avatar
3 votes
2 answers
721 views

Configuration for Windows account mapped to IIS certificate authorization

I need to connect two servers in different locations in order for one of them (Linux stack) issues HTTP periodic requests to the other (Windows stack) using cron based jobs. On the Windows machine, I ...
Juan's user avatar
  • 83
1 vote
1 answer
2k views

IIS - giving service accounts admin rights?

I'm looking at a application running on IIS which requires service account(s) to run some services/software, however the service account requires LOCAL ADMIN access which is against policy. Are there ...
deltzy's user avatar
  • 237
3 votes
0 answers
439 views

What trivial attacks is ASP.NET MVC mixed-mode auth vulnerable to?

In a 2012 MSDN blog post, Microsoft discourages mixed-mode authentication in ASP.NET MVC for being vulnerable to trivial attacks: The ASP.NET team doesn’t support using mixed-mode authentication in ...
Eric Eskildsen's user avatar
0 votes
1 answer
429 views

Is it safe to remove read-only attribute from wwwroot?

I have recently moved to a windows 2012 R2 serevr. I have problem for deleting files through HTTP even though I have granted modify,write and read permissions to IIS_ISURS. I noticed that inetpub/...
Ali Sheikhpour's user avatar
2 votes
1 answer
504 views

How secure IIS run together with XAMPP?

I'm using IIS for web server & run phpMyAdmin via IIS. But now, I saw someone use IIS and XAMPP. There is something I wanted to know. Usually they set : XAMPP to localhost:81 or localhost:...
Zinc's user avatar
  • 73
1 vote
1 answer
196 views

Islanding vs server lockdown

TL;DR: We're considering disconnecting our manufacturing computers from the outside world. How much less secure would it be to connect them only to a local server, which in turn connected to the ...
Cullub's user avatar
  • 111
2 votes
1 answer
722 views

SSL certificate for WebAPI

We have a simple system with a REST service (WebAPI) that will be hosted on one machine (hosted on IIS on a custom port, port numer 3031) and with a website hosted on another machine that will be ...
msporek's user avatar
  • 123
1 vote
1 answer
188 views

Use D Parameter Of Private Key as HMAC Secret for JWT in a Load Balanced Environment

I need to use a signature for a JWT that needs to be created or verified on 12 different servers running in a load balanced environment. They all already have the same RSA Key Pair stored in the ...
ste-fu's user avatar
  • 1,092
0 votes
1 answer
1k views

Is it safe to use an AD account to run an App Pool in IIS in order to provide SQL read/write permissions to a web app?

I've been working on an intranet web application that provides read/write, role-based access to a database. I have been asked to configure the IIS application to use an AD account for the Application ...
Beofett's user avatar
  • 137