iis-tilde-abuse

Tilde enumeration

• Tool - IIS-ShortName-Scanner

• Install JDK-18

• java -jar iis_shortname_scanner.jar 0 5 http://10.129.204.231/

Generate wordlist

• Shortlist Words starts with transf

egrep -r ^transf /usr/share/wordlists/* | sed 's/^[^:]*://' > /tmp/list.txt

Gobuster enumeration

gobuster dir -u http://10.129.204.231/ -w /tmp/list.txt -x .aspx,.asp