🧰 IIS

The items that name it 14

• From help desk impersonation to AD CS abuse: Investigating ESC1 and ESC8 intrusion paths
  writeupas affected products2026-10-30It is written here as Internet Information Services.
• lee1981 (@lee1981b) on X
  advisoryas classification.technologies2026-10-19
• Determined Attacker Uploads Malicious Webshells to Parks and Rec Management Platform Servers
  writeupas classification.technologies2026-09-30
• https://github.com/akha-security/akca
  repoas affected products2026-09-23

  shortname confusion checks covered by AKCA

• Web Fuzzing for Hackers
  articleas classification.technologies2026-08-21
• UAT-10147: Chinese-speaking adversary integrates agentic AI into post-compromise operations
  writeupas affected products2026-08-20It is written here as IIS (Internet Information Services).

  Targeted for BadIIS module injection; AppPool identity used for SeImpersonatePrivilege escalation

• Threat Actors Achieve Persistence After SQL Injection
  writeupas classification.technologies2026-07-13
• Defence Impairment Olympics
  writeupas classification.technologies2026-06-29
• The Devil, Eight Million Emails, and a Whole Lot of Milk | Phishing Stager Exposed
  writeupas classification.technologies2026-06-15
• How Hacked Construction Apps Are Bringing Down Jobsite Security
  writeupas classification.technologies2026-01-21
• Trial, Error & Typos: Malware Isn't Always 'Sophisticated' | Huntress
  writeupas classification.technologies2025-12-22
• Gladinet CentreStack/Triofox: Cryptography Vulnerability | Huntress
  advisoryas classification.technologies2025-12-18
• Velociraptor Misuse, Pt. II: The Eye of the Storm
  writeupas classification.technologies2025-12-03
• Two in a row - You mitigated wrong (Kentico CMS RCE)
  writeupas affected products2024-03-06It is written here as IIS (Internet Information Services).

  w3wp.exe worker process crashed; malicious IIS module (HTTPCacheLog.dll) registered via appcmd.exe, malicious global rewrite rules added