June 2008 - Posts

26
Comments

Using the new rules configuration in UrlScan v3.0 Beta (Part 2) by naziml

Dissecting the SQL injection sample in the walkthrough I will spend some time dissecting the SQL injection rule posted in the walkthrough for UrlScan. Before I do so, I want to re-iterate the fact that SQL injection is a web application issue, and hence...
12
Comments

UrlScan v3.0 filtering based on Request Entity by naziml

While some folks are rejoicing, others are noticing the lack of scanning for the request entity. Why would we do that? The easy answer is that this is just not possible with an ISAPI filter. In IIS 5 and earlier, there is no API that would allow us to...
11
Comments

Using the new rules configuration in UrlScan v3.0 Beta (Part 1) by naziml

If you haven't noticed already, UrlScan v3.0 Beta is out and it is the answer to all your prayers. Well maybe not all, but it still is nifty. UrlScan 2.5 is widely used and is quite popular. There were a few minor issues with it that were all fixed for...
15
Comments

Interaction between URL Rewriter and Request Filtering Modules for IIS7 by naziml

I hope folks have noticed the TP for the URL Rewriter module. Download it and give it a try! Microsoft URL Rewrite Module for IIS 7.0 CTP1 (x86) Microsoft URL Rewrite Module for IIS 7.0 CTP1 (x64) I have been playing around with in my spare time to get...
More Posts
Powered by Community Server (Commercial Edition), by Telligent Systems