Steve Schofield's Blog

SQL Injection rule explaination of what is actually scanned by URLScan

One of the things I was curious what URLScan actually scanned and how. What is just some server variables or what?! I asked Wade H from the IIS Team for further explaination. It is good to be aware when you are implementing URLScan 3.0 and sql injection...(read more)

Posted Friday, June 27, 2008 10:52 AM from Steve Schofield Weblog | 1 Comments

Filed under: sql injection

Tool to help detect SQL Injection

Here is a tool to help detect sql injections. You have to sign-up for the free tool, but it's worth it. http://www.communities.hp.com/securitysoftware/blogs/spilabs/archive/2008/06/23/finding-sql-injection-with-scrawlr.aspx Hope this helps...(read more)

Posted Friday, June 27, 2008 12:21 AM from Steve Schofield Weblog | (Comments Off)

Filed under: sql injection

URLScan 3.0 - help with sql injection attacks.

For those supporting a Classic ASP and ASP.NET application, you probably have noticed an increase in sql injection attempts. Microsoft has released an updated URLScan 3.0. Here is the link to download URlScan version 3 beta for 32 bit or 64 bit . You...(read more)

Posted Tuesday, June 24, 2008 11:55 PM from Steve Schofield Weblog | 1 Comments

Filed under: IIS

SQL Injection information for IIS admins and developers

The sql injection that has came up is affecting several ASP and ASP.NET applications. Although the only way to prevent an attack is validate the code, hopefully these posts will provide some direction. I included some links that discuss this more. http...(read more)

Posted Monday, June 23, 2008 12:51 AM from Steve Schofield Weblog | (Comments Off)

Filed under: IIS, sql injection

Powershell 2.0

I''ve tried really hard to get excited about Powershell 1.0, it just hasn't stuck. Am I the only one?! :) However, (yes there is a however). The great thing about software, there is a 2.0 release sooner or later. I've made the committment to learn Powershell...(read more)

Posted Sunday, June 22, 2008 11:35 PM from Steve Schofield Weblog | 1 Comments

SMTP links for IIS

I was answering a question @ http://forums.iis.net on SMTP scripting. I ran across a couple links I wanted to share. Programatically configure SMTP service on IIS to route mails to a domain http://blogs.msdn.com/mahjayar/archive/2004/11/08/254202.aspx...(read more)

Posted Saturday, June 07, 2008 8:57 PM from Steve Schofield Weblog | (Comments Off)

Filed under: SMTP

IIS7 - post #69 - Remember to disable SSL 2.0

I'm not certain why SSL 2.0 isn't disabled on Windows Server 2008 by default, but here is the KB article to remember to do that on your system. http://support.microsoft.com/kb/187498 How to test if you accept SSL 2.0 using IE is go to Internet options...(read more)

Posted Friday, June 06, 2008 12:05 AM from Steve Schofield Weblog | (Comments Off)

IIS 7 - post #68 - URL Rewrite module available

Exciting news for IIS 7.0 users. MS has released the much anticipated URL Rewrite module. Here is a post on it. http://learn.iis.net/page.aspx/460/using-url-rewrite-module/ Download the x86 CTP version for IIS 7.0: http://www.iis.net/downloads/default...(read more)

Posted Friday, May 30, 2008 5:28 PM from Steve Schofield Weblog | (Comments Off)

Filed under: IIS

IIS Debug Diag info

A co-worker posted a how-to using IIS Debug Diag . After going through this process, I have a new found respect for how easy and straight forward using IIS Debug Diag is http://blogs.orcsweb.com/jeff/archive/2008/05/29/using-iis-debug-diagnostics-to-troubleshoot...(read more)

Posted Thursday, May 29, 2008 11:45 PM from Steve Schofield Weblog | (Comments Off)

GraffitiCMS review

When I started http://www.appcmd.com , I wanted a content management system that allowed me to get up and going quickly. GraffitiCMS allowed me to do that. In one evening, I have over 30 posts in my new site + Search enabled automatically RSS feed capability...(read more)

Posted Saturday, May 24, 2008 9:20 PM from Steve Schofield Weblog | 1 Comments

IIS7 - post #67 - New command line reference site http://appcmd.com

I'm not sure if humans are supposed to remember command line syntax. For me, the most frustrating part is remembering the syntax of a certain command line option. To help me remember these for future use, and hopefully share with the community. I created...(read more)

Posted Saturday, May 24, 2008 7:10 AM from Steve Schofield Weblog | 1 Comments

Filed under: IIS

WinDBG refresher

I had to analyze a memory dump from a server that blue screened. This blog is a reference how I used WinDBG to analyze the dump. I don't claim to be an expert in WinDBG, but these few steps can be done in minutes to determine a issue if you have the memory...(read more)

Posted Thursday, May 22, 2008 3:07 PM from Steve Schofield Weblog | 1 Comments

Filed under: Troubleshooting, WinDBG

Powerpoint Presentations from recent talks

I've spoke recently at a couple events. Here are my PowerPoints. It's always fun to get together with other IT Professionals and share ideas / knowledge. 1) West Michigan Day of .NET. This event is developer focused and is a real grass roots 1 day event...(read more)

Posted Wednesday, May 21, 2008 10:42 PM from Steve Schofield Weblog | 1 Comments

My Hyper-V experiences

Hyper-V is probably one of the more exciting technologies to come out of Redmond, on the IT Pro side. I don't keep up on all betas like I used to, but Hyper-V has caught my attention. I reloaded my home pc with Windows Server 2008 x64. Here is my pc type...(read more)

Posted Sunday, May 18, 2008 9:15 PM from Steve Schofield Weblog | (Comments Off)

Filed under: HyperV

Exchange 2007 message limit articles

I was tasked to update Exchange 2007 message size limits. For the casual Exchange admin, this can be a rather daunting task. Here are a couple links I found that were helpful. http://forums.microsoft.com/TechNet/ShowPost.aspx?PostID=1545320&SiteID...(read more)

Posted Sunday, May 18, 2008 2:04 PM from Steve Schofield Weblog | 1 Comments

Filed under: Exchange2007

This Blog

Syndication

Recent Posts

Tags

Archives