Hacking IIS and NET

Explore IIS and .NET hacking techniques in this 54-minute conference talk from Circle City Con 2015. Dive into topics such as machine configuration files, preventing unauthorized access, password encryption, and app command vulnerabilities. Learn about shared configurations, assembly manipulation, and memory exploitation. Discover preemptive solutions, tips for creating crashes, and methods for accessing dump files. Gain insights into stealing strings and rewriting code to enhance your understanding of IIS and .NET security vulnerabilities and countermeasures.

Syllabus

Intro
Net Framework
Server Hacking
Hackers
Topics
Machine Configuration Files
How to stop people from accessing the machine config
Config files
Block access to directory
IIS configuration file
Warning
Conflict File
Password Encryption
App Command
App Pool
Shared Configuration
How to Prevent
Protip
Assemblies
Test Program
What do we do
Where is it
Preemptive solutions
Going after memory
How to hack memory
Tips for creating crashes
Accessing dump files
Stealing strings
Rewriting code