Security Unresolved Threads RSS

Discussion about IIS security including componentization, hidden directories, or authentication\authorization

Start a New Thread
Thread Views Replies

IIS Permissions

Created by randomperson55. Latest Post by Yuk Ding, Jul 08, 2020 02:56 AM.

48 3

Remove AD authentication

Created by zigiram. Latest Post by Yuk Ding, Jun 26, 2020 07:21 AM.

20 1

Certificate mapping (oneToOneMapping) results in 403.7.

Created by andrej.zozulya. Latest Post by andrej.zozulya, Jun 24, 2020 06:21 AM.

39 2

CustomError Execute URL shows 403.18, when running in different AppPool

Created by James Rajavarman. Latest Post by James Rajavarman, Jun 23, 2020 02:34 PM.

49 3

Client certificate authentication skip / continue 403 error

Created by ChristophThurnheer. Latest Post by Yuk Ding, Jun 18, 2020 09:30 AM.

34 2

Windows Server 2019 disable legacy TLS in IIS via certificate binding is unavailable

Created by pauldavidc. Latest Post by beesus, May 27, 2020 04:47 PM.

750 9

Attack and new files created

Created by MarkoLavs. Latest Post by MarkoLavs, May 27, 2020 08:45 AM.

56 6

Disable TRACE verb

Created by EyalD. Latest Post by lextm, May 26, 2020 12:41 PM.

17 1

Windows Authorization from PHP client app

Created by christok. Latest Post by christok, May 14, 2020 10:08 PM.

48 3

IIS and OCSP Stapling

Created by rbreness. Latest Post by Yuk Ding, May 01, 2020 09:07 AM.

66 1

Has anyone had success with TLSv1.3 and IIS10?

Created by bweber3. Latest Post by lextm, Apr 30, 2020 07:27 PM.

108 2

How to enable TLS session resumption or Optimize TLS handshake on Windows 2016

Created by twinklekumar. Latest Post by virshu, Apr 27, 2020 01:32 AM.

2344 5

IIS 10 - PHP v7.2.2 installed via Web Platform Installer - how to update to 7.3

Created by 9073241516. Latest Post by nbagency, Apr 16, 2020 04:47 AM.

1068 4

IIS Windows Authentication prompts for site pages multiple times, authPersistSingleResponse=false

Created by rmcgarry. Latest Post by nbagency, Apr 16, 2020 04:46 AM.

5100 10

MinBytesPerSecond for Slow HTTP Post Attack

Created by PavanKasi. Latest Post by coldplay5467, Apr 14, 2020 02:15 PM.

550 4

Server Sending RST ACK immediately after received Client Hello

Created by subrakanna97. Latest Post by lextm, Apr 12, 2020 12:33 PM.

163 7

Default iis message 40* is break security

Created by GuiSal. Latest Post by Yuk Ding, Apr 02, 2020 09:14 AM.

35 1

Qualys report Slow HTTP POST vulnerability

Created by wright.wang. Latest Post by 96496, Mar 30, 2020 11:26 PM.

250 5

SChannel certificate stores

Created by Vishnu Gopalakrishnan. Latest Post by Vishnu Gopalakrishnan, Mar 25, 2020 11:46 AM.

38 0

SFTP o FTPS

Created by PMamani. Latest Post by Yuk Ding, Mar 04, 2020 07:28 AM.

112 2
  • Unanswered Question
  • Answered Question
  • Announcement