bitquark / shortscan

An IIS short filename enumeration tool
MIT License
761 stars 73 forks source link

results in a DoS of target #2

Closed mreyelidz closed 1 year ago

mreyelidz commented 1 year ago

$> shortscan target.url

access to target via web browser and via ping indicate server is up and running prior to scan

Shortscan v0.5 · an IIS short filename enumeration tool by bitquark Target: xxxxxxxxxxxxxxxxxxxx Running: Microsoft-IIS/7.5 (ASP.NET v4.0.30319) Vulnerable: Yes!


Finished! Requests: 722; Retries: 0; Sent 139614 bytes; Received 274905 bytes

no shortnames are found and after running scan, and now the website is not reachable from my machine via ping or web browser.

isitdownrightnow.com also reports site as down

bitquark commented 1 year ago

If the server is getting overwhelmed with requests I'd suggest using the --concurrency option to set a lower request rate (default is 20 concurrent requests)