PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Finding Hidden Files and Folders on IIS using BigQuery

slcyber.io | research | #vulnerability-research | #recon | #content-discovery | #iis | #bigquery
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

How to use Google BigQuery's GitHub dataset to resolve full file and folder names discovered via IIS Shortname Scanner.
Published
Collected

Related coverage

research · slcyber.io
Contextual Content Discovery: You've forgotten about the API endpoints
Contextual content discovery methodology for API endpoint enumeration using application context rather than generic wordlists.
research · slcyber.io
How practical is 100k requests per second? Introducing h3fuzz
Can HTTP/3 really give you 100k requests per second for content discovery? We tested it in a fork of ffuf and are releasing h3fuzz, a web UI for fuzzing.
research · slcyber.io
More Critical Bugs in Adobe Experience Manager: Pre-Auth RCE
Chaining an unauthenticated bulk import, an in-band XXE, leaked IMS credentials and Groovy execution into full pre-auth RCE on Adobe Experience Manager Cloud.
research · slcyber.io
Leaking the Keys to the Kingdom: How a Single Slip Handed Over a Darknet Empire
# Leaking the Keys to the Kingdom: How a Single Slip Handed Over a Darknet Empire Get research alerts Share on social October 8, 2026 9 min read ### Table of Contents TOC Element The Sequence of...
research · slcyber.io
RCE in Progress WS_FTP Ad Hoc via IIS HTTP Modules (CVE-2023-40044)
# RCE in Progress WS_FTP Ad Hoc via IIS HTTP Modules (CVE-2023-40044) Get research alerts Share on social ) September 30, 2023 6 min read ### Table of Contents TOC Element About IIS HTTP Modules...
research · slcyber.io
Bypass IIS Authorisation with this One Weird Trick - Three RCEs and Two Auth Bypasses in Sitecore 9.3
# Bypass IIS Authorisation with this One Weird Trick - Three RCEs and Two Auth Bypasses in Sitecore 9.3 Get research alerts Share on social May 10, 2023 17 min read ### Table of Contents TOC...
Back