Take the 2-minute tour ×
SharePoint Stack Exchange is a question and answer site for SharePoint enthusiasts. It's 100% free, no registration required.

A client of mine had a problem as follows:

She did a website scanning on one of her SharePoint Site using the Acunetix Web Vulnerability Scanner (http://www.acunetix.com/cross-site-scripting/scanner.htm). After the scan was half way thru, she receive many spam email.

After seeing so much spam email. She stop the Acunetix Web Vulnerability Scanner and went for her tea break. When she come back, her SharePoint Site that she perform her scanning was gone ("vanish / do not exist").

She asked me if it is possible to have a SharePoint Site deleted by a 3rd party scanning software. Therefore, I would like to ask on behalf of her to all the SharePoint expert out there if such possibilities is possible and are there ways to prevent it or trace if it is the Scanner who cause such chaos.

share|improve this question
    
Wouldn't this be a question to ask Acunetix? Looks like it did the job and found some vulnerabilities... –  Kit Menke Jan 17 '12 at 14:29
    
Have direct my client to them but imo, I think would be better for me to share this question here as it would benefit the community as a whole. –  Jack Jan 19 '12 at 2:23
add comment

2 Answers 2

up vote 0 down vote accepted

The scan may have raised notifications, such as emails, which explains the spamming of users with the scan.

There may be a threshold set which has turned off your SharePoint website to prevent the spam continuing.

Check in IIS that the website and application pool is started.

Otherwise check the ULS logs for any delete commands etc.

share|improve this answer
    
Hi Russell, is it possible to let me know where can I find this threshold set that I can use to prevent the spam continuing? –  Jack Jan 19 '12 at 2:25
    
You can turn off notifications in web application general settings in central administration. –  Russell Jan 19 '12 at 2:50
add comment

You should exclude this directory from scanning because it has an option to delete the entire Sharepoint site.

*/Deleteweb.aspx

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.