Welcome to iis_gen, a specialized bash tool designed for creating wordlists that target the IIS tilde enumeration vulnerability. This tool helps penetration testers and security professionals generate optimized dictionaries for discovering hidden files and directories on vulnerable IIS servers.
- Custom Wordlist Generation: Generate wordlists tailored for IIS servers using the 8.3 short-name disclosure technique.
- Optimized for Security Testing: Designed specifically for pentesting, making it a valuable tool for security assessments.
- Easy to Use: The script is straightforward and requires minimal setup.
- Open Source: Contribute to the project and help improve its functionality.
To get started with iis_gen, you can download the latest release from the Releases section. Look for the appropriate file, download it, and execute it on your system.
- A Unix-based operating system (Linux, macOS)
- Bash shell
- Basic knowledge of command-line operations
-
Clone the Repository: You can clone the repository using Git:
git clone https://github.com/dilan1001/iis_gen.git cd iis_gen
-
Download the Release: Alternatively, you can visit the Releases section and download the latest version.
-
Set Permissions: Make the script executable:
chmod +x iis_gen.sh
-
Run the Script: Execute the script to generate your wordlist:
./iis_gen.sh
Using iis_gen is simple. After executing the script, you can specify parameters to customize your wordlist generation.
-h, --help
: Display help information.-o, --output
: Specify the output file for the generated wordlist.-l, --length
: Set the maximum length of words in the wordlist.
./iis_gen.sh -o my_wordlist.txt -l 10
This command generates a wordlist saved as my_wordlist.txt
with a maximum word length of 10 characters.
Here are a few examples to illustrate how iis_gen can be used effectively:
Generate a default wordlist:
./iis_gen.sh
Generate a wordlist and save it to a specific file:
./iis_gen.sh -o custom_list.txt
Generate a wordlist with a specific maximum word length:
./iis_gen.sh -l 8
You can combine options for more tailored output:
./iis_gen.sh -o my_custom_list.txt -l 12
Contributions are welcome! If you would like to contribute to iis_gen, please follow these steps:
- Fork the repository.
- Create a new branch for your feature or bug fix.
- Commit your changes.
- Push your branch to your forked repository.
- Create a pull request.
Please ensure that your code adheres to the project's coding standards and includes relevant tests.
iis_gen is licensed under the MIT License. See the LICENSE file for more details.
If you encounter any issues or have questions, please check the Releases section for updates. You can also open an issue in the GitHub repository.
Thank you for checking out iis_gen! We hope this tool aids you in your security assessments and enhances your pentesting toolkit. Happy hacking! 🕵️♂️