Re:Remote Kernel Code Execution Via HTTP Request In IIS On W...
by MichaelGG on Wednesday April 15, 2015 @10:19AM
(#9381098)
Nope. WinRM or Power shell seem to use it too. Enabled by default. (Just created a 2012R2 server last night.)
Plus if you have reservations created with HTTP.SYS, your app doesn't even have to be running. A friend tried turning off IIS, but port 80 would still respond.
Plus if you have reservations created with HTTP.SYS, your app doesn't even have to be running. A friend tried turning off IIS, but port 80 would still respond.