Create an account

Very important

  • To access the important data of the forums, you must be active in each forum and especially in the leaks and database leaks section, send data and after sending the data and activity, data and important content will be opened and visible for you.
  • You will only see chat messages from people who are at or below your level.
  • More than 500,000 database leaks and millions of account leaks are waiting for you, so access and view with more activity.
  • Many important data are inactive and inaccessible for you, so open them with activity. (This will be done automatically)

0Day Forums Coding Asp.Net User ASP.NET runs under

Thread Rating:
  • 628 Vote(s) - 3.57 Average
  • 1
  • 2
  • 3
  • 4
  • 5
Options
User ASP.NET runs under

Offline assertorily234899


Valued member
***
Valued member
Posts: 0
Threads: 0
Joined: Jan 2021
Reputation: 0
Level: inf [Level]
Total Points: inf
Rank nan / 1
100% to upload Level
Rank
Activity inf / 1
99% to upload your Rank
Activity
Experience nan
100% to upload Experience
Experience

Points: 50
#1
07-23-2023, 09:13 AM
I'm a bit confused about how ASP.NET, what user it runs under? On iis 7.5 and on 6.0

A few of the user accounts that I'm not clear on are

- Network Service
- IUSR
- AppPool

Any clarification on the different users would be appreciated and security considerations/etc.
Reply

Offline planets69756


Valued member
***
Valued member
Posts: 0
Threads: 0
Joined: May 2021
Reputation: 0
Level: inf [Level]
Total Points: inf
Rank nan / 1
100% to upload Level
Rank
Activity inf / 1
99% to upload your Rank
Activity
Experience nan
100% to upload Experience
Experience

Points: 50
#2
07-23-2023, 09:19 AM
ASP.net by default runs underneath the [IIS_IUSRS](

[To see links please register here]

) user group. So if you need to grant permission to allow your application to run, use that group.
Reply

Offline declared399


Member
*
Member
Posts: 0
Threads: 0
Joined: Oct 2018
Reputation: 0
Level: inf [Level]
Total Points: inf
Rank nan / 1
100% to upload Level
Rank
Activity inf / 1
99% to upload your Rank
Activity
Experience nan
100% to upload Experience
Experience

Points: 50
#3
07-23-2023, 09:19 AM
In summary:

- **IIS 5.1** (Windows XP) - it's a local `ASPNET` account
- **IIS 6** - by default, application pools run under the `Network Service` account which is a member of `IIS_WPG` group
- **IIS 7.0** - still `Network Service`
- **IIS 7 SP2 / 7.5** - runs under an ephemeral thing called `ApplicationPoolIdentity` which maps to an account `IIS APPPOOL\ApplicationPool` (e.g. IIS APPPOOL\DefaultAppPool). This account is a member of `IIS_IUSRS` user group
- **ASP.NET Web Development Server (Cassini)** - it's obviously your own account


And it's a good practice to create a custom low-privileged account to run your application especially on PROD environment or when you need to access the network from the application.


[1]:

[To see links please register here]

Reply

« Next Oldest
Next Newest »


Forum Jump:


Users browsing this thread:
1 Guest(s)

©0Day  2016 - 2023 | All Rights Reserved.  Made with    for the community. Connected through