ţܱɡIISǽ

ţܹٷվ:http://www.iis6.com.cn
------------------------------------
1.Webǽ

Webǽwebserver֮ϣϴwebserverwebapp֮һƽ̨ҪǱwebӦòΣݵв֤ݺӦõİȫ

1.1 ơǰP2Pĳ֣߳أѸ׵ȣվеĴԴؿݽߣӰվΪ֧áţIISǽ Ч߳شʧվӮȻ
1.2 SQLע롣SQLע빤߳InternetԶMass SQL Injection һͿԸǧվصҵݰȫţIISǽעģ⼼Чظֱע룬ЧֹGET,POST,COOKIEע,ҵڻռ䡣
1.3 CCڻ漤ҵĽ죬ľϵһһվصCC֮վ̱ͷ½ţIISǽ ǿֹCCɵDDOS׽ǷĲľϵ
1.4 Դվ໥ԴͼƬӣϰΪ˷ѴԴҲһȨΪţIISǽԶվԴи߶ȱֹԭվĺϷȨ档
ע⣺Դдվ㣬пվ޷ʡ޸úҪӦʹЧ
1.5 XSSվOWASPXSSΪ2007WEBȫвһλڿWebҳhtml룬ûҳ֮ʱǶWebhtmlᱻִУӶﵽûĿġţIISǽЧXSSĶURLء
1.6 ӰֻӰ߲ŶֱأıƵվĴԴͷ
-------------------------------------
2.ҳ۸

ʵʱWebĿ¼ı仯ǿֹҳ۸ġ

һϵͳվĿ¼ͱĿ¼վĿ¼ͱĿ¼뱣һ£

ڶҪ۸ļϢ͵ָ䣬дϢ÷ʼ

÷۸ģֻǼش۸Ϣ

ĲҪ۸ĵվĿ¼ϵͳվĿ¼һ£

岽ѡ͡

ʼء 
--------------------------------------
3.Webshellɨ

ͨɨ99%WebShellwebȫ

һɨĿ¼

ڶѡɨ͡

ɨ衣
---------------------------------------
4.ļ۸ļ

ȡҪļҳ뱻޸ĺѸٴӴļҳصĺŻľҳ档

һWebĿ¼

ڶѡļ͡

ȡһʹȡļļĬϱlog/old.log,עⱣôļ

ĲѡļѡǰȡļУļǷ񱻸Ķ

岽۸ļ顣ֻУļҪеһ
----------------------------------------
5.ż

ҪڼWin2003һļ·©ļΪhack.aspʱ򣨼ļһASPļļʱļµı͵ļIISбASPִСxxx..\ļлᱻڿáļмͨɾҲ޸ģľһЩɱӶ˹ЧҳļС

һWebĿ¼

ڶʼɨ衣
-----------------------------------------
6.

ĳ洦ɼԱֹ˺ܴѣ˹ܿɽԱ

һWebĿ¼

ڶѡļ͡

дҪĹ롣

Ĳ
-----------------------------------------
7.ϵͳο"ҳ۸"á
-----------------------------------------
8.ARP

ArpߣֹARPϢػ񡣵ڿͬһεûκARPʩȻûڵͻվʱҳ뼴ARPͬʱڿͿ̽ftphttpû롣ڿվȫ⵽ĹȻarpԱصвarpƭأɱͨѶжϣϣϰ󶨱ipmacַ

һдIP

ڶȡMAC

ء
-----------------------------------------
9.ע

һע->ע롣

ڶע뷢ǣȷϹ󣬸עkeyļעᡣ
-----------------------------------------
10.ϵʽ

email:nbsoft@yahoo.cn
ϵQQ:12167423
ϵQQ:1071201223