| Determine whether scripts are used on the web server for the subject website. Common file extensions include, but are not limited to: .cgi, .pl, .vb, .class, .c, .php, .asp, and .aspx. |
If the website does not utilize CGI, this finding is Not Applicable.
Open the IIS 8.5 Manager.
Right-click the IIS 8.5 web site name and select “Explore”.
Search for the listed script extensions
Search for the following files: *.bak, *.old, *.temp, *.tmp, *.backup, or “copy of...”.
If files with these extensions are found, this is a finding.