Ivo

I am programming forum. Tech is ASP.NET, C# and SQL Server 2005. I want to
see is my site safe, have I made some security problems. Can you try to hack
my site untill 10-september-2007.:
http://www.search4affiliate.com/Forum.aspx
Thanx

John Timney \(MVP\)

why dont you check it yourself against the NSA Security guide for IIS to see
if your up to scratch

http://www.nsa.gov/snac/downloads_se...ID=scg10.3.1.4

...or get some penetrtion testing software!!!

Regards

John Timney (MVP)
http://www.johntimney.com
http://www.johntimney.com/blog


"Ivo" <ivo_x@gmail.com> wrote in message news:fe4u55$san$1@sunce.iskon.hr...
>I am programming forum. Tech is ASP.NET, C# and SQL Server 2005. I want to
>see is my site safe, have I made some security problems. Can you try to
>hack my site untill 10-september-2007.:
>http://www.search4affiliate.com/Forum.aspx
> Thanx
>
>

rowe_newsgroups

On Oct 5, 4:51 am, "Ivo" <iv...@gmail.com> wrote:
> I am programming forum. Tech is ASP.NET, C# and SQL Server 2005. I want to
> see is my site safe, have I made some security problems. Can you try to hack
> my site untill 10-september-2007.:http://www.search4affiliate.com/Forum.aspx
> Thanx

It may not be a "hack" but simply typing in any html construct in your
username box will give a YSOD

Thanks,

Seth Rowe

Marc Gravell

Actually, I found doing pretty much anything will give you a YSOD (or
alternatively a 404, since many of the links are mis-typed). Either
the site has already succumbed to SQL-injection (I notice that quotes
in qs params cause YSOD), or it just isn't very well written.

Ivo

"Marc Gravell" <marc.gravell@gmail.com> wrote in message
news:1191581155.392494.221420@19g2000hsx.googlegro ups.com...
> Actually, I found doing pretty much anything will give you a YSOD (or
> alternatively a 404, since many of the links are mis-typed). Either
> the site has already succumbed to SQL-injection (I notice that quotes
> in qs params cause YSOD), or it just isn't very well written.

I just turned off writing errors in web config file. It have beed turned on
because of developing website, but when site will be active, it will be
turned off and will not showing errors (and source code) in browser.

rowe_newsgroups

> Can you try to hack my site untill 10-september-2007

Oh wait, I just noticed the date. You do realize that September 10
2007 was over a long time ago right?

Thanks,

Seth Rowe

Mark Rae [MVP]

"rowe_newsgroups" <rowe_email@yahoo.com> wrote in message
news:1191586454.942753.151340@w3g2000hsg.googlegro ups.com...
>> Can you try to hack my site untill 10-september-2007
>
> Oh wait, I just noticed the date. You do realize that September 10
> 2007 was over a long time ago right?


Let's hope that everyone who clicked the site in question has up-to-date and
memory-resident anti-virus and anti-spyware protection...


--
Mark Rae
ASP.NET MVP
http://www.markrae.net

Ivo

> Oh wait, I just noticed the date. You do realize that September 10
> 2007 was over a long time ago right?

If you have some good hack methotds and need to prepare, you can write here
and date will be increased, no problem.

Peter Bromberg [C# MVP]

With 8 replies in the thread, I can just imagine what would happen if every
script kiddie and their brother were encouraged to post "hack my site" stuff
on a public newsgroup.
--
Recursion: see Recursion
site: http://www.eggheadcafe.com
unBlog: http://petesbloggerama.blogspot.com
BlogMetaFinder: http://www.blogmetafinder.com



"Ivo" wrote:

> > Oh wait, I just noticed the date. You do realize that September 10
> > 2007 was over a long time ago right?
>
> If you have some good hack methotds and need to prepare, you can write here
> and date will be increased, no problem.
>
>
>

Ivo

Site is down. Hacked by Goran from Croatia Europe. He is expert. Hacking
period is stoped. Finito!