ASPx

1. View-state

1.1. The __VIEWSTATE parameter is not encrypted

1.2. assestfinder

2. Unprotected files

2.1. global.asa.bak

2.2. WS_FTP

2.3. _vti_pvt misconfiguration /_vti_adm/ /_vti_aut/ /_vti_bin/ /_vti_bin/..%255c..%255c..%255c..%255cwinnt/system32/cmd.exe?/c+dir /_vti_bin/fpcount.exe?Page=default.asp|Image=3 /_vti_bin/shtml.dll /_vti_bin/shtml.dll/asdfghjkl /_vti_bin/shtml.exe/qwertyuiop /_vti_bin/_vti_aut/dvwssr.dll /_vti_bin/_vti_aut/fp30reg.dll /_vti_bin/_vti_aut/fp30reg.dll?1234=X /_vti_cnf/ /_vti_log/ /_vti_pvt/ /_vti_pvt/administrator.pwd /_vti_pvt/administrators.pwd /_vti_pvt/authors.pwd /_vti_pvt/service.pwd /_vti_pvt/shtml.exe /_vti_pvt/users.pwd /_vti_script /_vti_txt

2.4. _vti_pvt misconfiguration

2.5. Trace.axd