Re: [NSE] http-iis-short-name-brute.nse

[David Fifield <david () bamsoftware com>]

On Sun, Sep 16, 2012 at 05:12:19PM +0200, Dev (nmap) wrote:
> Hi List,
>
> Attached is a NSE implementation of "iis-shortname-scanner-poc" from
> http://code.google.com/p/iis-shortname-scanner-poc/ .
>
> The script searches for the short name of files and dirs, example output:
>
> PORT   STATE SERVICE REASON
> 80/tcp open  http
> | http-iis-short-name-brute:
> |   Folders
> |     aspnet~1
> |   Files
> |     sql~1.bak
> |_    test~1.php
>
> It still needs some testing, but currently I don't have access to an
> affected IIS installation. Any chance someone  here has access to an
> IIS installation and can test it (or grant me permission to test on
> the platform) ?

This script is fine with me, if you can get some testing results.

David Fifield
_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://seclists.org/nmap-dev/