GitHub PR 2209

Posted by Joshua Rogers on Jan 03

Hi,

Submitted PR 2209 to modify the http-iis-short-name-brute.nse script to use
OPTIONS method:

Current version of http-iis-short-name-brute.nse only uses GET requests. As
per
https://soroush.secproject.com/blog/2014/08/iis-short-file-name-disclosure-is-back-is-your-server-vulnerable/,
the OPTIONS method can also be used. I have updated the script to
additionally use the OPTIONS method.

Thanks,
Josh

Print Share Comment Cite Upload Translate

APA

() » GitHub PR 2209. Retrieved from https://www.truth.cx/2021/01/03/github-pr-2209/.

MLA

" » GitHub PR 2209." - , https://www.truth.cx/2021/01/03/github-pr-2209/

HARVARD

» GitHub PR 2209., viewed ,

VANCOUVER

- » GitHub PR 2209. [Internet]. [Accessed ]. Available from: https://www.truth.cx/2021/01/03/github-pr-2209/

CHICAGO

" » GitHub PR 2209." - Accessed . https://www.truth.cx/2021/01/03/github-pr-2209/

IEEE

" » GitHub PR 2209." [Online]. Available: https://www.truth.cx/2021/01/03/github-pr-2209/. [Accessed: ]

Select a language: Afrikaans Albanian Arabic Armenian Basque Bengali Bulgarian Catalan Cambodian Chinese (Mandarin) Croatian Czech Danish Dutch English Estonian Fiji Finnish French Georgian German Greek Gujarati Hebrew Hindi Hungarian Icelandic Indonesian Irish Italian Japanese Javanese Korean Latin Latvian Lithuanian Macedonian Malay Malayalam Maltese Maori Marathi Mongolian Nepali Norwegian Persian Polish Portuguese Punjabi Quechua Romanian Russian Samoan Serbian Slovak Slovenian Spanish Swahili Swedish Tamil Tatar Telugu Thai Tibetan Tonga Turkish Ukrainian Urdu Uzbek Vietnamese Welsh Xhosa <p>Posted by Joshua Rogers on Jan 03</p>Hi,<br> <br> Submitted PR 2209 to modify the http-iis-short-name-brute.nse script to use<br> OPTIONS method:<br> <br> Current version of http-iis-short-name-brute.nse only uses GET requests. As<br> per<br> <a rel="nofollow" href="https://soroush.secproject.com/blog/2014/08/iis-short-file-name-disclosure-is-back-is-your-server-vulnerable/">https://soroush.secproject.com/blog/2014/08/iis-short-file-name-disclosure-is-back-is-your-server-vulnerable/</a>,<br> the OPTIONS method can also be used. I have updated the script to<br> additionally use the OPTIONS method.<br> <br> Thanks,<br> Josh<br> First name:

Last name: