🧰 Microsoft IIS

The items that name it 2

• Determined Attacker Uploads Malicious Webshells to Parks and Rec Management Platform Servers
  writeup2026-09-30

  Web server software affected by 8.3 tilde enumeration probing and WebDAV method abuse attempts

• Defence Impairment Olympics
  writeup2026-06-29

  Web server (w3wp.exe worker process) compromised via webshell upload; IIS logging was disabled by the threat actor and ModSecurity IIS WAF module was uninstalled