Comments (5)
mohemiv
commented on August 29, 2024
1
I've tested the updated version and the acceptableDifferenceLengthBetweenResponses parameter and it doesn't look like it solve the issue.
Anyway, you can test the tool on the https://178.[DELETE].22.[REMOVE].91.[SKIP].155/ server. Please note that the company that owns this server authorized researches to do vulnerabilities testing and you are free to report any issues found on this server to the company.
from iis-shortname-scanner.
irsdl
commented on August 29, 2024
1
I think if you set acceptableDifferenceLengthBetweenResponses to -1 in the config file, it will work. There is a bug in the cleaning RegEx at the moment which needs fixing. I will also add more flexibility around the cleaning area when removing dynamic values in the responses so it can handle different cases better.
from iis-shortname-scanner.
irsdl
commented on August 29, 2024
Thanks for reporting this, I will need to have a test server to try it so any other info would be useful.
I also realised I had not pushed my latest code changes to the repo so I have done it now. Please let me know if that has fixed this issue. If not, could you please reduce the acceptableDifferenceLengthBetweenResponses parameter to 1 to see if it changes anything?
from iis-shortname-scanner.
mohemiv
commented on August 29, 2024
Indeed, the value of -1 solves the issue.
from iis-shortname-scanner.
irsdl
commented on August 29, 2024
I have just updated it to version 2023.3 to mainly address this issue. Please let me know if you still have an issue and I will re-open this.
from iis-shortname-scanner.
Related Issues (20)
- Number of threads should be reduced - can be too late but reduced to... HOT 2
- False positives with cisco web panel. HOT 1
- Make a proper github release? HOT 2
- Scanner with SSRF HOT 1
- show full name of dir HOT 1
- how I can show the full name of directory ? HOT 1
- Running jar does not respond HOT 1
- Brute Force needed
- Cookie mistake > I don't use "&" character in cookie HOT 1
- Java 10 (& maybe 9) reflective access security policy errors HOT 1
- java configuration HOT 3
- Retreive text messages HOT 1
- Google.com HOT 1
- The scanner shows that we're vulnerable if rebuilt or run using any Java version other than 7 HOT 2
- Reflection issue in jdk 17+ with DEBUG requests HOT 3
- reserve the jdk8 or jdk11 version of the tool HOT 1
- Stuck in a loop? HOT 3
- Error: Invalid or corrupt jarfile IISShortNameScannerTool.java HOT 2
- Error: config file was not found: config.xml
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from iis-shortname-scanner.