IIS shortname scanner written in Go
Make sure you've a recent version of the Go compiler installed on your system. Then just run:
GO111MODULE=on go get -u github.com/sw33tLie/sns
If you are on Windows:
set GO111MODULE=on
go get -u github.com/sw33tLie/sns
sns -u https://example.com/
View all available flags with sns -h.
- https://soroush.secproject.com/downloadable/microsoft_iis_tilde_character_vulnerability_feature.pdf
- https://soroush.secproject.com/blog/2014/08/iis-short-file-name-disclosure-is-back-is-your-server-vulnerable/
- https://soroush.secproject.com/blog/2012/06/microsoft-iis-tilde-character-vulnerabilityfeature-short-filefolder-name-disclosure/