Web Config [Lücke?]

**HayvanModus**

Sehr geehrte Damen und Heere,

Irgendwie bekommt es ein User mit durch mein web.config Datei die Seite auf Offline zu stellen.

XML

<?xml version="1.0" encoding="UTF-8"?>
<configuration>
    <system.webServer>
        <rewrite>
            <rules>
<rule name="rule 1a">
	<match url="^index$" />
	<action type="Rewrite" url="/index.php" />
</rule>
<rule name="rule 2a">
	<match url="^index(|/)$" />
	<action type="Rewrite" url="/./index.php?site=index" />
</rule>
<rule name="rule 3a">
	<match url="^register(|/)$" />
	<action type="Rewrite" url="/./index.php?site=register" />
</rule>
<rule name="rule 4a">
	<match url="^main(|/)$" />
	<action type="Rewrite" url="/./index.php?site=me" />
</rule>
<rule name="rule 5a">
	<match url="^logout(|/)$" />
	<action type="Rewrite" url="/./index.php?site=logout" />
</rule>
<rule name="rule 6a">
	<match url="^security/staff/seccode(|/)$" />
	<action type="Rewrite" url="/./index.php?site=seccode" />
</rule>
<rule name="rule 7a">
	<match url="^home/(.*)(|/)$" />
	<action type="Rewrite" url="/./index.php?site=home&user={R:1}" />
</rule>
<rule name="rule 8a">
	<match url="^community(|/)$" />
	<action type="Rewrite" url="/./index.php?site=community" />
</rule>
<rule name="rule 9a">
	<match url="^sicherheit(|/)$" />
	<action type="Rewrite" url="/./index.php?site=sicherheit" />
</rule>
<rule name="rule 10a">
	<match url="^sicherheit/benimmregeln(|/)$" />
	<action type="Rewrite" url="/./index.php?site=sicherheit-benimmregeln" />
</rule>
<rule name="rule 11a">
	<match url="^community/staff(|/)$" />
	<action type="Rewrite" url="/./index.php?site=staff" />
</rule>
<rule name="rule 12a">
	<match url="^news(|/)$" />
	<action type="Rewrite" url="/./index.php?site=news" />
</rule>
<rule name="rule 13a">
	<match url="^news/(.*)(|/)$" />
	<action type="Rewrite" url="/./index.php?site=news&newsid={R:1}" />
</rule>
<rule name="rule 14a">
	<match url="^hotel$" />
	<action type="Rewrite" url="/./index.php?site=client" />
</rule>
<rule name="rule 14b">
	<match url="^hotel$" />
	<action type="Rewrite" url="/./index.php?site=clientb" />
</rule>
<rule name="rule 15a">
	<match url="^community/werbeteam$" />
	<action type="Rewrite" url="/./index.php?site=werbeteam" />
</rule>
<rule name="rule 16a">
	<match url="^DJ/(.*)(|/)$" />
	<action type="Rewrite" url="/DJ/{R:1}.php" />
</rule>
<rule name="rule 17a">
	<match url="^DJ(|/)$" />
	<action type="Rewrite" url="/DJ/index.php" />
</rule>
<rule name="rule 18a">
	<match url="^settings/(.*)(|/)$" />
	<action type="Rewrite" url="/index.php?site=settings&page={R:1}" />
</rule>
<rule name="rule 19a">
	<match url="^community/experten(|/)$" />
	<action type="Rewrite" url="/index.php?site=experten" />
</rule>
<rule name="rule 20a">
	<match url="^extras/home(|/)(.*)(|/)(.*)$" />
	<action type="Rewrite" url="/index.php?site=extras.start&action={R:1}&id={R:2}" />
</rule>
<rule name="rule 21a">
	<match url="^extras/group(|/)$" />
	<action type="Rewrite" url="/index.php?site=extras.group" />
</rule>
<rule name="rule 22a">
	<match url="^groups/(..*)$" />
	<action type="Rewrite" url="/index.php?site=group&groupid={R:1}" />
</rule>
<rule name="rule 23a">
	<match url="^extras/username(|/)$" />
	<action type="Rewrite" url="/index.php?site=extras.username" />
</rule>
<rule name="rule 24a">
	<match url="^papers/agb(|/)$" />
	<action type="Rewrite" url="/index.php?site=papers_disclaimer" />
</rule>
<rule name="rule 25a">
	<match url="^main/groups(|/)$" />
	<action type="Rewrite" url="/index.php?site=mygroups" />
</rule>
<rule name="rule 26a">
	<match url="^ref/(.*)$" />
	<action type="Rewrite" url="/./index.php?site=register&ref={R:1}" />
</rule>
<rule name="rule 27a">
	<match url="^intranet/page/(..*)$" />
	<action type="Rewrite" url="/./intranet/index.php?site={R:1}" />
</rule>
<rule name="rule 28a">
	<match url="^bank/(.*)$" />
	<action type="Rewrite" url="/index.php?site=bank.{R:1}" />
</rule>
<rule name="rule 29a">
	<match url="^bwr(|/)$" />
	<action type="Rewrite" url="/index.php?site=bwr" />
</rule>
<rule name="rule 30a">
	<match url="^community/online(|/)$" />
	<action type="Rewrite" url="/index.php?site=online" />
</rule>
<rule name="rule 31a">
	<match url="^admin/user/(.*)(|/)$" />
	<action type="Rewrite" url="/index.php?modus=admin&site=user&name={R:1}" />
</rule>
<rule name="rule 32a">
	<match url="^admin/room/(.*)(|/)$" />
	<action type="Rewrite" url="/index.php?modus=admin&site=room&id={R:1}" />
</rule>
<rule name="rule 33a">
	<match url="^admin/(.*)(|/)$" />
	<action type="Rewrite" url="/index.php?modus=admin&site={R:1}" />
</rule>
<rule name="rule 34a">
	<match url="^bwr/info(|/)$" />
	<action type="Rewrite" url="/index.php?site=bwrinfo" />
</rule>
<rule name="rule 35a">
	<match url="^community/wm(|/)$" />
	<action type="Rewrite" url="/index.php?site=wm" />
</rule>
<rule name="rule 36a">
	<match url="^admin$" />
	<action type="Rewrite" url="/index.php?modus=admin;site=home" />
</rule>
<rule name="rule 37a">
	<match url="^extras/casino(|/)$" />
	<action type="Rewrite" url="/index.php?site=extras.casino" />
</rule>
<rule name="rule 38a">
	<match url="^extras/umfragen(|/)$" />
	<action type="Rewrite" url="/index.php?site=extras.polls" />
</rule>
<rule name="rule 39a">
	<match url="^error(|/)$" />
	<action type="Rewrite" url="/index.php?site=error" />
</rule>
<rule name="rule 40a">
	<match url="^papers/impressum(|/)$" />
	<action type="Rewrite" url="/index.php?site=papers_impressum" />
</rule>
<rule name="rule 41a">
	<match url="^forum(|/)$" />
	<action type="Rewrite" url="/index.php?site=forum" />
</rule>
<rule name="rule 42a">
	<match url="^forum/view/(.*)/page/(.*)$" />
	<action type="Rewrite" url="/index.php?site=forum&action=view&id={R:1}&page={R:2}" />
</rule>
<rule name="rule 43a">
	<match url="^forum/view/(.*)(|/)(.*)$" />
	<action type="Rewrite" url="/index.php?site=forum&action=view&id={R:1}" />
</rule>
<rule name="rule 44a">
	<match url="^forum/page/(.*)(|/)$" />
	<action type="Rewrite" url="/index.php?site=forum&action=page&id={R:1}" />
</rule>
<rule name="rule 45a">
	<match url="^forum/del/(.*)(|/)$" />
	<action type="Rewrite" url="/index.php?site=forum&action=del&id={R:1}" />
</rule>
<rule name="rule 46a">
	<match url="^extras/badge(|/)$" />
	<action type="Rewrite" url="/index.php?site=extras.badgeshop" />
</rule>
<rule name="rule 47a">
	<match url="^help(|/)(.*)$" />
	<action type="Rewrite" url="/index.php?site=help" />
</rule>
<rule name="rule 48a">
	<match url="^main/help(|/)(.*)$" />
	<action type="Rewrite" url="/index.php?site=help" />
</rule>
<rule name="rule 49a">
	<match url="^extras/bot/(.*)/(.*)$" />
	<action type="Rewrite" url="/index.php?site=extras.bot&{R:1}={R:2}" />
</rule>
<rule name="rule 50a">
	<match url="^extras/bot(|/)$" />
	<action type="Rewrite" url="/index.php?site=extras.bot" />
</rule>
<rule name="rule 51a">
	<match url="^url/(.*)$" />
	<action type="Rewrite" url="/index.php?site=url&path={R:1}" />
</rule>
<rule name="rule 52a">
	<match url="^imager/(.*)(|/)$" />
	<action type="Rewrite" url="/index.php?site=imager&user={R:1}" />
</rule>
<rule name="rule 53a">
	<match url="^community/preisliste/item/(.*)$" />
	<action type="Rewrite" url="/index.php?site=preisliste&item={R:1}" />
</rule>
<rule name="rule 54a">
	<match url="^community/preisliste(|/)$" />
	<action type="Rewrite" url="/index.php?site=preisliste" />
</rule>




<rule name="rule 55a">
	<match url="^load/(.*)(|/)$" />
	<action type="Rewrite" url="/public/loader/{R:1}.php" />
</rule>
<rule name="rule 56a">
	<match url="^client/head.gif/(.*)(|/)$" />
	<action type="Rewrite" url="/client/head.php?figure={R:1}" />
</rule>
<rule name="rule 56a1">
            <match url="^client/habbo-imaging/badge/([^/]+)" ignoreCase="false" />
            <action type="Rewrite" url="/client/habbo-imaging/badge.php?badge={R:1}" appendQueryString="false" />
</rule>
<rule name="rule 57a2">
            <match url="^client/habbo-imaging/head/([^/]+)" ignoreCase="false" />
            <action type="Rewrite" url="/client/habbo-imaging/head.php?figure={R:1}" appendQueryString="false" />
</rule>
<rule name="rule 58a">
			<match url="^bank/(.*)$" ignoreCase="false" />
			<action type="Rewrite" url="index.php?site=bank.{R:1}" appendQueryString="false" />
		</rule>
<rule name="rule 59a">
	<match url="^clientutils(|/)$" />
	<action type="Rewrite" url="/clientutils.php" />
</rule>
<rule name="rule 60a">
	<match url="^crash(|/)$" />
	<action type="Rewrite" url="/index.php?site=crash" />
</rule>
<rule name="rule 62a">
	<match url="^badgecreator/badge(|/)$" />
	<action type="Rewrite" url="/habbo-imaging/badge.php" />
</rule>
<rule name="rule 63a">
    <match url="^habbo-imaging/badge/([^/]+)" ignoreCase="false" />
    <action type="Rewrite" url="/habbo-imaging/badge.php?badge={R:1}" appendQueryString="false" />
</rule>
<rule name="rule 64a">
    <match url="^habbo-imaging/head/([^/]+)" ignoreCase="false" />
    <action type="Rewrite" url="/habbo-imaging/head.php?figure={R:1}" appendQueryString="false" />
</rule>
<rule name="rule 65a">
	<match url="^proxy(|/)$" />
	<action type="Rewrite" url="/proxy.php" />
</rule>
<rule name="rule 66a">
	<match url="^banmobile(|/)$" />
	<action type="Rewrite" url="/index.php?site=banmobile" />
</rule>
<rule name="rule 67a">
    <match url="^country/(.*)(|/)(.*)$" ignoreCase="false" />
    <action type="Rewrite" url="/country?ip={R:1}" appendQueryString="false" />
</rule>
<rule name="rule 68a">
	<match url="^country(|/)$" />
	<action type="Rewrite" url="/country.php" />
</rule>
</rules>
        </rewrite>
        <httpErrors>
            <remove statusCode="401" subStatusCode="-1" />
            <remove statusCode="403" subStatusCode="-1" />
            <remove statusCode="502" subStatusCode="-1" />
            <remove statusCode="501" subStatusCode="-1" />
            <remove statusCode="500" subStatusCode="-1" />
            <remove statusCode="412" subStatusCode="-1" />
            <remove statusCode="406" subStatusCode="-1" />
            <remove statusCode="405" subStatusCode="-1" />
            <remove statusCode="404" subStatusCode="-1" />
            <error statusCode="404" prefixLanguageFilePath="" path="/404.php" responseMode="ExecuteURL" />
        </httpErrors>
       <httpRedirect enabled="false" destination="http://localhost/index.php" />
        <defaultDocument>
            <files>
                <clear />
                <add value="index.php" />
                <add value="wunschbox.php" />
                <add value="Default.htm" />
                <add value="Default.asp" />
                <add value="index.htm" />
                <add value="index.html" />
                <add value="iisstart.htm" />
            </files>
        </defaultDocument>
    </system.webServer>


    <system.web>
        <compilation debug="true" targetFramework="4.0" />
    </system.web>


</configuration>

Alles anzeigen

Ich weiß nicht wie er es macht hoffe könnt weiter Helfen...

klinker_

Schau in deinen Webserver Logs nach

**HayvanModus**

Zitat von klinker_

Schau in deinen Webserver Logs nach

Habe ich nie was davon gehört wo befinden sich das?

PixelFriend

Zitat von HayvanModus

Habe ich nie was davon gehört wo befinden sich das?

der war gut hahaha

Und durch deine web.config wird dich der angreifer nicht wirklich kaputt bekommen da muss schon was anderes sein XDD

**HayvanModus**

Zitat von PixelFriend

der war gut hahaha

Und durch deine web.config wird dich der angreifer nicht wirklich kaputt bekommen da muss schon was anderes sein XDD

Er hat irgendwas gemacht durch die web.config dann konnte ich die web.config nicht ersetzen weil es auf einem anderen Prozessor wohl läufte.

habe mit CMD versucht zu löschen ging ebenso nicht, musste Server Neustarten.

Ich habe es weiter gegeben an Blazingfast die haben es gefixxt.

plex

Zitat von HayvanModus

Er hat irgendwas gemacht durch die web.config dann konnte ich die web.config nicht ersetzen weil es auf einem anderen Prozessor wohl läufte.
habe mit CMD versucht zu löschen ging ebenso nicht, musste Server Neustarten.

Ich habe es weiter gegeben an Blazingfast die haben es gefixxt.

CLOSED

Jetzt mitmachen!