soroushrocks

README

SoroushRocks Go Version

IIS shortname scanner written in Go based on sns and including a bruteforce part

Installation

Make sure you've a recent version of the Go compiler installed on your system. Then just run:

go install github.com/aituglo/soroushrocks@latest

Usage

soroushrocks -u https://example.com/

View all available flags with soroushrocks -h.

References

• https://soroush.secproject.com/downloadable/microsoft_iis_tilde_character_vulnerability_feature.pdf
• https://soroush.secproject.com/blog/2014/08/iis-short-file-name-disclosure-is-back-is-your-server-vulnerable/
• https://soroush.secproject.com/blog/2012/06/microsoft-iis-tilde-character-vulnerabilityfeature-short-filefolder-name-disclosure/