Skip to content

iis_gen.sh - IIS Tilde Enumeration Dictionary Generator - A specialized bash tool for creating wordlists specifically designed to exploit the IIS tilde enumeration vulnerability. It generates optimized dictionaries for guessing hidden files and directories by leveraging the short-name (8.3) disclosure technique in vulnerable IIS servers.

Notifications You must be signed in to change notification settings

dilan1001/iis_gen

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

8 Commits
 
 
 
 

Repository files navigation

iis_gen 🛠️ - IIS Tilde Enumeration Dictionary Generator

GitHub release GitHub issues GitHub stars

Welcome to iis_gen, a specialized bash tool designed for creating wordlists that target the IIS tilde enumeration vulnerability. This tool helps penetration testers and security professionals generate optimized dictionaries for discovering hidden files and directories on vulnerable IIS servers.

Table of Contents

Features

  • Custom Wordlist Generation: Generate wordlists tailored for IIS servers using the 8.3 short-name disclosure technique.
  • Optimized for Security Testing: Designed specifically for pentesting, making it a valuable tool for security assessments.
  • Easy to Use: The script is straightforward and requires minimal setup.
  • Open Source: Contribute to the project and help improve its functionality.

Installation

To get started with iis_gen, you can download the latest release from the Releases section. Look for the appropriate file, download it, and execute it on your system.

Prerequisites

  • A Unix-based operating system (Linux, macOS)
  • Bash shell
  • Basic knowledge of command-line operations

Steps

  1. Clone the Repository: You can clone the repository using Git:

    git clone https://github.com/dilan1001/iis_gen.git
    cd iis_gen
  2. Download the Release: Alternatively, you can visit the Releases section and download the latest version.

  3. Set Permissions: Make the script executable:

    chmod +x iis_gen.sh
  4. Run the Script: Execute the script to generate your wordlist:

    ./iis_gen.sh

Usage

Using iis_gen is simple. After executing the script, you can specify parameters to customize your wordlist generation.

Command-Line Options

  • -h, --help: Display help information.
  • -o, --output: Specify the output file for the generated wordlist.
  • -l, --length: Set the maximum length of words in the wordlist.

Example Command

./iis_gen.sh -o my_wordlist.txt -l 10

This command generates a wordlist saved as my_wordlist.txt with a maximum word length of 10 characters.

Examples

Here are a few examples to illustrate how iis_gen can be used effectively:

Basic Usage

Generate a default wordlist:

./iis_gen.sh

Custom Output File

Generate a wordlist and save it to a specific file:

./iis_gen.sh -o custom_list.txt

Specifying Word Length

Generate a wordlist with a specific maximum word length:

./iis_gen.sh -l 8

Combining Options

You can combine options for more tailored output:

./iis_gen.sh -o my_custom_list.txt -l 12

Contributing

Contributions are welcome! If you would like to contribute to iis_gen, please follow these steps:

  1. Fork the repository.
  2. Create a new branch for your feature or bug fix.
  3. Commit your changes.
  4. Push your branch to your forked repository.
  5. Create a pull request.

Please ensure that your code adheres to the project's coding standards and includes relevant tests.

License

iis_gen is licensed under the MIT License. See the LICENSE file for more details.

Support

If you encounter any issues or have questions, please check the Releases section for updates. You can also open an issue in the GitHub repository.


Thank you for checking out iis_gen! We hope this tool aids you in your security assessments and enhances your pentesting toolkit. Happy hacking! 🕵️‍♂️

About

iis_gen.sh - IIS Tilde Enumeration Dictionary Generator - A specialized bash tool for creating wordlists specifically designed to exploit the IIS tilde enumeration vulnerability. It generates optimized dictionaries for guessing hidden files and directories by leveraging the short-name (8.3) disclosure technique in vulnerable IIS servers.

Topics

Resources

Stars

Watchers

Forks

Packages

No packages published

Languages