Hacking IIS

Hacking IIS

Dive into advanced IIS server hacking techniques in this 22-minute conference talk from NahamCon2021. Explore HTTPAPI 2.0 asset management, VHost hopping, local file disclosure in ASP.NET MVC applications, and complex XXE vectors. Learn to resolve 404 errors, access internal admin panels, leverage web.config files, and perform source code analysis using DNSpy. Discover logical fuzzing techniques for files and folders, and gain insights into ASP.NET Viewstate deserialization and targeting dependencies. Perfect for security professionals looking to enhance their IIS hacking skills.