How to hide a website on the IIS server

How to find hidden websites on the IIS server. After learning how intruders build hidden websites on our hosts, we can learn how to find these hidden websites.

Right-click the site name of the IIS server and choose "properties"> "main directory, change "execution license" of the site from "Pure script" to "NONE" (or "script and executable file", but we recommend that you do not select this option ,), then click "application". How can this problem be solved? The original image is exposed (). The previous "liuqq" is the deleted directory, and the "liuyes" is the alias for the hacker to create a "virtual directory.

Of course, we only know that there is a hidden directory (website) on the IIS server, but this is not the case, because we still don't know where it is stored (intruders won't be stupid enough to follow the above method to create a hidden website), of course there is no way to delete it. Let's find its nest and take it out.

Create the "liuqq" directory in the root directory of the website, and then go back to the IIS Server Manager to refresh it to see the hidden website directory. If you want to wait, KILL it.

Finally, don't forget to change the settings in the figure back, otherwise the website will not be able to browse. Okay. Let's move the hidden website away from us. Good LUCK to host administrators!

Background: During the experiment, we found that the IIS server's website hiding method is invalid for WIN2003 + SP1. Please note that!