bbot icon indicating copy to clipboard operation
bbot copied to clipboard

Add support for IIS /bin exposure to ffuf_shortnames

Open liquidsec opened this issue 1 year ago • 1 comments

The additional techniques described here:

https://swarm.ptsecurity.com/source-code-disclosure-in-asp-net-apps/

Could be applied to iis_shortnames/ffuf_shortnames modules

Thanks @amiremami for the suggestion.

liquidsec avatar Jul 18 '24 16:07 liquidsec

This has been implemented here: https://github.com/blacklanternsecurity/bbot/pull/2127

In the form of detecting shortnames for the bin folder using the bin::$index_allocation trick.

Will likely not be trying to have ffuf_shortnames actually guess the dll names using the cookieless session URL trick, because the DLLs anyone would care about would not be in the prediction model anyway. I might revisit if I can get true generative AI predictions to work.

liquidsec avatar Jan 06 '25 19:01 liquidsec