Add-SSLCertificate
Installs a .pfx file
Create a self signed SSL certificate
Create and install a self signed SSL certificate (with the SelfSSL7 utility)
IIS ApplicationPoolIdentity account password stored in clear text
I usually hate to agree with the detractors of Microsoft and uses often, because it’s right, the argument that Microsoft products are …
HardenedOrNot
Read some registry keys to check if the Windows 2003 server is hardened or not
ModSecurity extension for IIS
Microsoft announced the popular open source security module ModSecurity for the IIS platform is coming. Over the last few years Microsoft has …
Microsoft IIS 7.5 .NET source code disclosure and Authentication Bypass
Affected Software: Microsoft IIS/7.5 with PHP installed in a special configuration (Tested with .NET 2.0 and .NET 4.0) The special configuration requires …
Microsoft IIS 7.5 Classic ASP Authentication Bypass
Affected Software: Microsoft IIS 7.5 with configured Classic ASP and .NET Framework v4.0 installed (.NET Framework 2.0 is unaffected, other .NET frameworks …
Microsoft IIS 6.0 with PHP installed Authentication Bypass
Affected software: Microsoft IIS 6.0 with PHP installed (tested on Windows Server 2003 SP1 running PHP5) Details: By sending a special request …