search

bitquark / shortscan

An IIS short filename enumeration tool
MIT License
712 stars 67 forks source link

Wordlist Contents? #3

Closed iBringsTheRuckus closed 1 year ago

iBringsTheRuckus commented 1 year ago

First of all I wanted to say thank you for the great tool! I was looking into using a wordlist with your shortutil tool, but I'm unsure of what the wordlist should contain. Would it be possible to include a few samples?

I'm unsure if it can contain directories like /iishelp/iis/misc/default.asp

Or the end directory like /misc/

Of if the word list can contain actual pages like admin.aspx

bitquark commented 1 year ago

I'm glad you're finding shortscan useful! With regards to wordlists, shortutil expects a list of files or directories with no path elements, however it will normalise any input so that only the last path element will be used, and terminating directory slashes will be removed so you can throw most things at it and it'll generate somewhat sensible output. Hope that helps!

marcelo321 commented 2 weeks ago

Would be cool to have a wordlist added here too to serve as an example? like top1000 dirs and files or something like that