Nmap Security Scanner
*Intro
*Ref Guide
*Install Guide
*Download
*Changelog
*Book
*Docs
Security Lists
*Nmap Hackers
*Nmap Dev
*Bugtraq
*Full Disclosure
*Pen Test
*Basics
*More
Security Tools
*Pass crackers
*Sniffers
*Vuln Scanners
*Web scanners
*Wireless
*Exploitation
*Packet crafters
*More
Site News
Site Search:
Exploit World
Advertising
About/Contact
Credits
Sponsors:
edgeos



WebApp Sec: Re: extra dot on domain name gives different site

Re: extra dot on domain name gives different site

From: Eric Marden <security_at_xentek.net>
Date: Fri, 25 Jan 2008 23:12:51 -0500

I've seen it before in my trips around the web. I didn't get a
default page, but got 2 different sites with/without a period. But
like you said, it probably chokes on it and falls back to the default
site or something.

IIS *is* a known issue.

Eric Marden
xentek: enlightened internet solutions
http://xentek.net/

On Jan 23, 2008, at 6:52 AM, Robin Wood wrote:

> Hi
> I've just been looking at a site and accidentally added an extra dot
> to the end of the domain name, rather than getting the site I got a MS
> small business server 2003 admin page.
>
> e.g.
> http://www.site.com gives the real site
> http://www.site.com. gives the admin page
>
> I assume that this is something to do with IIS not parsing the url
> correctly so giving the default website rather than the vhost with
> that address. Is this a known issue? I tried to google but couldn't
> think what to google for!
>
> Robin
>
> ----------------------------------------------------------------------
> ---
> Sponsored by: Watchfire
> Methodologies & Tools for Web Application Security Assessment
> With the rapid rise in the number and types of security threats,
> web application security assessments should be considered a crucial
> phase in the development of any web application. What methodology
> should be followed? What tools can accelerate the assessment
> process? Download this Whitepaper today!
>
> https://www.watchfire.com/securearea/whitepapers.aspx?
> id=70170000000940F
> ----------------------------------------------------------------------
> ---
>

-------------------------------------------------------------------------
Sponsored by: Watchfire
Methodologies & Tools for Web Application Security Assessment
With the rapid rise in the number and types of security threats, web application security assessments should be considered a crucial phase in the development of any web application. What methodology should be followed? What tools can accelerate the assessment process? Download this Whitepaper today!

https://www.watchfire.com/securearea/whitepapers.aspx?id=70170000000940F
-------------------------------------------------------------------------
Received on Jan 26 2008

[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]
edgeos