Script running against IIS
Hi All, I've got an IIS box that appears to have an exploit script running against it everyday. When I look at the IIS logs there are multiple entries similar to this one: 2013-05-29 12:14:35...
View Articleiis alert about sni and default web site
hello after some trouble i've installed 2 sni cerificate, now i get this alert from iis menager:1) no default ssl site created. To support browsers without servr name, it is advisable to create an ssl...
View Articlemicrosoft certificates
what are they used for, what do they stand for, cause i am pretty sure someone has gained one in my name (whome i know), and i dont know why or what their using it for!!! pls HELP
View ArticleDLLs getting downloaded in IIS 7.5 when the Error page Feature Settings has...
Hello,This is related to setting custom error pages in IIS 7.5We have an application, wherein we have custom Error pages, for 404 and 500 respectively.Lets take the default case for error code 500:Open...
View ArticleProgrammatically set (select) SSL certificate in Website binding
I'm trying to export and import my app pools and websites from one server to a new one.I managed to create the app pools and websites in the new server but the bindings section in the websites isn't...
View ArticleBest approach to remove excessive HTTP response headers in Azure/IIS7
We are using Azure cloud services and need to hide the excessive response headers as per pen test reports.At present, I have implemented the approach as per...
View Articlewindows authentication missing
am using windows 7 home premium 64bitwindows authentication is missing in iis/world wide web services/security
View ArticleMultiple SSL Certs for the Same WebSite
Is it possible to use multiple SSL Certs for the same site? I have Drupal running on IIS7.5, Windows 2008 R2. It is a farm environment. When our "regular" employees come to the site, they have to...
View ArticleConfigure IIS7 for DoD Smart Card Authentication
I'm developing a PHP application on a development server at my house and I can't, for the life of me, get the browser to prompt me for my client certificate that is available on my smart card....
View ArticleURLScan + dot in path
Dear friends,We have a hosting business, running IIS 7.5. I installed URLScan. Ive had issues with paths such as thishttp://www.domain.com/index.php/services/products/Unfortunately this is something...
View ArticleUnified Authentication for IIS and ASP.NET MVC 4 Intranet Web App for Both...
We’re developing an ASP.NET MVC 4 web application for IIS7.5 and IIS8. This web application will only be an intranet site. The app needs to be accessible to internal, desktop users (think Windows...
View ArticleDeny directly access to javascript files
Hi all.I'd like to deny directly access to my js files, but I'm in trouble.Imagine I have a web site www.example.com an it uses js files, so, someone tries to accesswww.example.com/scripts/script.js...
View ArticleIIS6 Windows Integrated Security in a Domain Enviroment
HiI have an intranet working for a while over an II6 (Windows 2003 Server), it is a very simple one, mostly for anounces porposes, it wasn't made by me, it was made mostly using Front Page (2003 or...
View ArticleHelp with connection string issues
I've seen this question asked over on asp.net but the material is 2010 and the structure of the IIS interface seems to have changed, so the one word, one sentence replies from experienced programmers...
View ArticleIIS 7.5 - "keyset does not exist" error
I have a web service that uses an X509 certificate to encrypt and decrypt data. Of course, everything is working perfectly in the dev environment (Windows XP), but now migrating to real server for unit...
View ArticleURLScan RejectResponseUrl not working, getting 403 Forbidden on IIS 7.5 Win2008
Hello. I have specified a RejectResponseUrl in URLScan (latest version) with UseFastPathReject=0, and I know URLScan is working when I test it, but instead of going to the specified RejectResponseUrl...
View ArticleSecurity Breach or bad config
Hello,I came across a problem which seems to me a security breach in IIS7.5 (with rewrite module).According to my investigation: if you have an IIS7.5 with RewriteModule installed and a default...
View ArticleIIS 7.5 Client Certificate
I have been tasked to setup client certificate authentication for ASMX web services i am hosting on Windows 2008 R2 server with IIS 7.5 and web services are ASMX built on ASP.NET 4.0 with C#. Web...
View ArticleThe request failed with HTTP status 401: Unauthorized. IIS7
I am having issues with an ASP.NET web application on a windows 2008 server. It is currently running on a Windows 2000 server without issues. Any help is appreciated! HAVE BEEN STRUGGLING WITH THIS FOR...
View Article