Recent Posts

0
Comments

Enable Loopback adapter on Windows Server 2008 by steve schofield

netsh int ipv4 set int "Loopback Adapter" weakhostreceive=enabled weakhostsend=enabled netsh int ipv4 set int "Local Area Connection" weakhostreceive=enabled weakhostsend=enabled
0
Comments

UNC caching information in forums.iis.net post by steve schofield

Here is a post in forums.iis.net that is worthy of an complete article. http://forums.iis.net/t/1150447.aspx It addresses caching on a UNC path where the server is a non- Microsoft OS file server. It's a Novell server using CIFS. If you have documents...
Filed under:
0
Comments

Google free Web App security scanner by steve schofield

Google giving away free Web App security scanner: http://news.yahoo.com/s/pcworld/20080703/tc_pcworld/147917 Cheers, Steve
0
Comments

IIS7 - post #70 - IIS 7.0 podcast by Steve Schofield by steve schofield

I've listened to a lot of podcasts and never "until now" did a podcast. Craig Shoemaker approached me about doing a podcast. The podcast was real easy! All I had to do was talk about the subject I've been involved with since December 2005, IIS 7.0. We...
Filed under:
0
Comments

Misc Powershell links by steve schofield

For my own reference. Freenode IRC network: irc.freenode.net Web client at powershelllive.com/irc Newsgroup name microsoft.public.windows.powershell www.PowerScripting.net www.PowerShellCommunity.org
Filed under:
0
Comments

IISLogs 2.0 Per Directory feature article by steve schofield

One of the exciting and powerful features of IISLogs 2.0 ( www.iislogs.com ) is handling log files on a Per Directory feature. Have you ever needed to handle unknown file extensions? Need unique rules for various folders? These couple items are handled...
Filed under:
0
Comments

SQL Injection rule explanation how URLScan 3.0 scans requests by steve schofield

One of the things I was curious what URLScan actually scanned and how. What is just servervariables or what?! I asked Wade H from the IIS Team for further explaination. It is good to be aware when you are implementing URLScan 3.0 and sql injection rules...
Filed under: ,
0
Comments

Tool to help detect SQL Injection by steve schofield

Here is a tool to help detect sql injections. You have to sign-up for the free tool, but it's worth it. http://www.communities.hp.com/securitysoftware/blogs/spilabs/archive/2008/06/23/finding-sql-injection-with-scrawlr.aspx Hope this helps
Filed under:
1
Comments

URLScan 3.0 - help with sql injection attacks. by steve schofield

For those supporting a Classic ASP and ASP.NET application, you probably have noticed an increase in sql injection attempts. Microsoft has released an updated URLScan 3.0. Here is the link to download URlScan version 3 beta for 32 bit or 64 bit . You...
Filed under: ,
3
Comments

SQL Injection information for IIS admins and developers by steve schofield

The sql injection that has came up is affecting several ASP and ASP.NET applications. Although the only way to prevent an attack is validate the code, hopefully these posts will provide some direction. I included some links that discuss this more. http...
Filed under: ,
More Posts Next page »