diff --git a/.gitbook/assets/image (445).png b/.gitbook/assets/image (445).png new file mode 100644 index 00000000..574ff118 Binary files /dev/null and b/.gitbook/assets/image (445).png differ diff --git a/.gitbook/assets/image (446).png b/.gitbook/assets/image (446).png new file mode 100644 index 00000000..574ff118 Binary files /dev/null and b/.gitbook/assets/image (446).png differ diff --git a/pentesting/pentesting-web/iis-internet-information-services.md b/pentesting/pentesting-web/iis-internet-information-services.md index ce56d63c..64875ae3 100644 --- a/pentesting/pentesting-web/iis-internet-information-services.md +++ b/pentesting/pentesting-web/iis-internet-information-services.md @@ -133,6 +133,15 @@ C:\xampp\sendmail\sendmail.ini C:\xampp\tomcat\conf\server.xml ``` +### HTTPAPI 2.0 404 Error + +If you see an error like the following one: + +![](../../.gitbook/assets/image%20%28446%29.png) + +It means that the server **didn't receive the correct domain name** inside the Host header. +In order to access the web page you could take a look to the served **SSL Certificate** and maybe you can find the domain/subdomain name in there. If it isn't there you may need to **brute force VHosts** until you find the correct one. + ## Old IIS vulnerabilities worth looking for ### Microsoft IIS tilde character “~” Vulnerability/Feature – Short File/Folder Name Disclosure