+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: Backend ASPNET error? (/showthread.php?tid=6078152)
Backend ASPNET error? - joni1n3r - May 14, 2020
Hello im try to access a site with extension .aspx but i get a really really strange error, i got a status error 500 "Internal Server Error", but the website display a object moved?
<title>Document moved</title>
Object Moved
This document may be found here
What are really happening in the backend? is this can implicate a security breach? or is just a bad error implementation?
thankz
RE: Backend ASPNET _error_? - frank3nstien - May 14, 2020
(May 14, 2020 12:40 PM)joni1n3r Wrote: Hello im try to access a site with extension .aspx but i get a really really strangeerror_, i got a status _error 500 "Internal Servererror_", but the website display a object moved?
<title>Document moved</title>
Object Moved
This document may be found here
What are really happening in the backend? is this can implicate a security breach? or is just a bad _error implementation?
thankz
I think that problem is that your web-service is in the same web application with your Sharepoint or website
In this case website intercepts the request handle from IIS and try to resolve it by himself. But it can't do it, and redirects you to its default page or error page
RE: Backend ASPNET _error_? - joni1n3r - May 14, 2020
(May 14, 2020 08:08 PM)frank3nstien Wrote: I think that problem is that your web-service is in the same web application with your Sharepoint or website
In this case website intercepts the request handle from IIS and try to resolve it by himself. But it can't do it, and redirects you to its default page orerror page
So in this scenario IIS is trying to resolve and give the error 500, and the web-service give the redirect? Is posible to exploit in any way?