Microsoft has finally released a tool that helps
secure your IIS machine. This new tool helps patch,
and lockdown IIS from well known holes, as well as
helping protect itself from unknown holes.
Download it below
(NOTE: This is also added to our patch section of this site.)
IIS Lockdown Tool
IIS LockDown Tool released
Favorite Links
- Security Templates (New)
- The Web Application Security Consortium
- QA Security
- The Web Security Mailing List
- Romain Gaucher’s Blog
- Jeremiah Grossman’s Blog
Popular Pages
WASC Threat Classification
- Abuse of Functionality
- Application Misconfiguration
- Brute Force Attack
- Content Spoofing
- Credential/Session Prediction
- Denial of Service
- Directory Indexing
- Information Leakage
- Remote File Inclusion Attack
- Routing Detour Attack
- SOAP Array Abuse
- XML Attribute Blowup
- XML Injection
- XML External Entity Attack