shortscan

An IIS short filename enumeration tool

Name:shortscan

Category:Fuzzing

Publisher:trickest-mhmdiaa

Created:7/25/2024

Container:quay.io/trickest/shortscan:v0.9.0-patch-3

Output Type:

License:Unknown

Source:View Source

Parameters

urls · file · required

urls to scan

header · string

--headerheader to send with each request (use multiple times for multiple headers)

output · string

--outputoutput format (human = human readable; json = JSON) [default: human]

is-vuln · boolean

--isvulnbail after determining whether the service is vulnerable [default: false]

timeout · string

--timeoutper-request timeout in seconds [default: 10]

full-url · boolean

--fullurldisplay the full URL for confirmed files rather than just the filename [default: false]

patience · string

--patiencepatience level when determining vulnerability (0 = patient; 1 = very patient) [default: 0]

wordlist · file

--wordlistcombined wordlist + rainbow table generated with shortutil

stabilise · boolean

--stabiliseattempt to get coherent autocomplete results from an unstable server (generates more requests) [default: false]

verbosity · string

--verbosityhow much noise to make (0 = quiet; 1 = debug; 2 = trace) [default: 0]

characters · string

--charactersfilename characters to enumerate [default: JFKGOTMYVHSPCANDXLRWEBQUIZ8549176320-_()&'!#$%@^{}~]

no-recurse · boolean

--norecursedon't detect and recurse into subdirectories (disabled when autocomplete is disabled) [default: false]

concurrency · string

--concurrencynumber of requests to make at once [default: 20]

header-file · file

--header-fileheaders to send with each request (one per line)

autocomplete · string

--autocompleteautocomplete detection mode (auto = autoselect; method = HTTP method magic; status = HTTP status; distance = Levenshtein distance; none = disable) [default: auto]