Collected research
"ASPXErrorPath in URL" Technique in Scanning a .Net Web Application
“ASPXErrorPath in URL” Technique in Scanning a .Net Web Application
When a .NET site redirects every failure to one custom error page, 404 and 500 become indistinguishable to a crawler. Adding ?aspxerrorpath=/ to the request makes ASP.NET surface the real status code, so a scanner can tell a missing file from a broken one. The defence offered is rewriting any request carrying aspxerrorpath outside the error page.
Record
- Document
- “ASPXErrorPath in URL” Technique in Scanning a .Net Web Application
- Researcher
- Soroush Dalili
- Published by
- soroush.me
- Topic
- Other
In the archive
Tags
This page is the archive's own catalogue record. The research is the work of Soroush Dalili, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on .