bbot
bbot copied to clipboard
Add support for IIS /bin exposure to ffuf_shortnames
The additional techniques described here:
https://swarm.ptsecurity.com/source-code-disclosure-in-asp-net-apps/
Could be applied to iis_shortnames/ffuf_shortnames modules
Thanks @amiremami for the suggestion.
This has been implemented here: https://github.com/blacklanternsecurity/bbot/pull/2127
In the form of detecting shortnames for the bin folder using the bin::$index_allocation trick.
Will likely not be trying to have ffuf_shortnames actually guess the dll names using the cookieless session URL trick, because the DLLs anyone would care about would not be in the prediction model anyway. I might revisit if I can get true generative AI predictions to work.