一些乱七八糟的笔记

隔离用户
目录：LocalUser/+用户目录
ssl

ii6中启用子验证
将AppPool的运行标示设置为Local System
注册子验证组件，iissuba.dll
rundll32 %windir%/system32/iissuba.dll,RegisterIISSUBA
设置Metabase属性AnonymousPasswordSync=true
adsutil.vbs set w3svc/AnonymousPasswordSync true
查看匿名用户密码
C:/Inetpub/AdminScripts>cscript //H:cscript
adsutil.vbs get w3svc/AnonymousUserName
notepad adsutil.vbs
IsSecureProperty
加上
IsSecureProperty = False
Exit Function
adsutil.vbs get w3svc/AnonymousUserPass

soft:wfetch
ieHTTPHeaders
?IIS lockdown
?urlscan

MetaBase审计
审核对象访问
c:/windows/system32/cscript iiscnfg.vbs /enableaudit / /r
集中的W3C Logging
adsutil.vbs set W3SVC/CentralW3CLoggingEnabled true

selfssl
cscript //H:cscript

配置文件：%systemroot%/System32/Inetsrv/MetaBase.xml
架构文件：%systemroot%/System32/Inetsrv/MBSchema.xml

日志分析工具
Log Manager(logman.exe)
Tracerpt(tracerpt.exe)
应用程序调优工具
Web Application Strees Tool(WAST)
Application Center Test(ACT)
Http压缩启动
网站→属性→服务→压缩应用程序文件

MIME任何类型：*,application/octet-stream
IIS状态码 KB 318380
Service Unavailable httperr.log

netstat -ano
tlist pid
netstat -ano | find "LISTENING">tcplisten.txt //获得TCP监听端口列表
netstat -ano | find "UDP">udplisten.txt //获得UDP监听端口列表

Imail激活：156.21.1.22 156.21.1.171