Deep understand ASPX file handling and some related attack vectors
blog.viettelcybersecurity.com | research | #windows | #attack-vectors | #dotnet | #webshell | #iis | #aspx
Summary
A deep dive into IIS ASPX handling: sites, applications and app pools, the pipeline compiling ASPX into cached DLLs, and how the code-gen directory is derived, grounding several IIS attack vectors.
- Published
- Collected
--- id: 7351 title: "Deep understand ASPX file handling and some related attack vectors" source_domain: blog.viettelcybersecurity.com source_url: "https://blog.viettelcybersecurity.com/deep-understand-aspx-file-handling-and-some-related-attack-vector/" published_at: "2022-07-25T07:50:00Z" tags: ["windows", "attack-vectors", "dotnet", "webshell", "iis", "aspx"] phying_url: "https://phying.com/item/7351" lang: en --- # Deep understand ASPX file handling and some related attack vectors ## Summary A deep dive into IIS ASPX handling: sites, applications and app pools, the pipeline compiling ASPX into cached DLLs, and how the code-gen directory is derived, grounding several IIS attack vectors. ## Intelligence Metadata - **Sources:** blog.viettelcybersecurity.com - **Published:** 2022-07-25T07:50:00Z - **Original:** https://blog.viettelcybersecurity.com/deep-understand-aspx-file-handling-and-some-related-attack-vector/ - **Phying News:** https://phying.com/item/7351