Collaborate Disseminate
I have a website with a URL of lets say "123.example.com" where I am hosting a large ERP system. Does hosting the application at "123.example.com/myapp" provide any layer of security from malicious web crawlers/bots etc… Continue reading Subdomain vs Virtual Path discovery by bots
I am a beginner in Windows Server management. Currently, i have a VPS which already has a website running in IIS 10. Also have a domain which already point out to the Server’s IP Address for that running website.
I use Gophish for windows … Continue reading How to deploy Gophish in a running IIS Server [migrated]
I’m reading this presentation https://drive.google.com/file/d/1aeNq_5wVwHRR1np1jIRQM1hocrgcZ6Qu/view?pli=1
And I couldn’t understand page 48,
The author didn’t say much about it, does anyone know how it works?
I administer a Windows Server with IIS that has many DNN sites (the .net CMS) working, and in the past weeks we noticed that the results on google of these DNN sites show spam, gibberish, weird characters and when opening the link it doesn… Continue reading IIS sites that use DNN have been hacked [closed]
I come from Linux background and have previously hosted websites on nginx. I use certbot to create and install SSL certificate.
I’m trying my hands-on Windows IIS, I have deployed a website on IIS. Now to add a SSL to my website I’m trying… Continue reading How to generate SSL certificate on windows machine for use with IIS? [migrated]
I’ve read bits around this, but I am curious should I be worried. I constantly am getting hit with random GET and POST requests from I guess just bots crawling the web trying to find vulnerabilities.
You can see below, the POST /GponForm/d… Continue reading Random endpoint getting pinged constantly on my server [duplicate]
I have a server (server01) running IIS with a Web certificate installed. The certificate has the following SANs –
server01.companyname.com
server02.companyname.com
The binding on Default Web Site for HTTPS for 443 has no HostName specifi… Continue reading IIS with alternate name in SAN Cert prompts for Credentials [migrated]
I have a site published in IIS. The site using HTTPS protocol and the web hosting certificate is already expired. This web hosting certificate path is under the trust root certificate which is not expired yet. I am very new to this so I am… Continue reading Renew a web hosting certificate on IIS [closed]
I need to prepare my web app for a penetration test. The scenario is: If one of our windows users is hacked, what can the hacker do to my app and my database?
I have a virtual machine on our server, which holds a SQL Server Express and a d… Continue reading How to secure a SQL Server database (windows auth) against a network windows user (penetration test)
The application in question offers the option to create arbitrary C# code and execute it at any time. These could be considered macros to customize certain tasks. Say that a normal user, who would normally not be able to use this feature, … Continue reading Exploit user controllable C# code in webapp