Microsoft IIS version detect
ID: microsoft-iis-version
Severity: info
Author: Wlayzz
Tags: tech,microsoft,iis
Description
Section titled “Description”Some Microsoft IIS servers have the version on the response header. Useful when you need to find specific CVEs on your targets.
YAML Source
Section titled “YAML Source”id: microsoft-iis-version
info: name: Microsoft IIS version detect author: Wlayzz severity: info description: Some Microsoft IIS servers have the version on the response header. Useful when you need to find specific CVEs on your targets. metadata: max-request: 1 tags: tech,microsoft,iis
http: - method: GET path: - "{{BaseURL}}"
host-redirects: true max-redirects: 4 matchers-condition: and matchers: - type: word part: header words: - "IIS"
extractors: - type: kval part: header kval: - Server# digest: 490a004630440220064f8cd5bc5f9ec7b7d7b2afaf0451a0a51eb2643a704bb362dd4cf5e76c5dcb022066d8dece1d0e1256f6fe41534f606dad0f638c98cd0f4408adc670382acbe0f6:922c64590222798bb761d5b6d8e72950Guide to check the vulnerabilities
Section titled “Guide to check the vulnerabilities”This template is used to detect vulnerabilities in web applications. It can be used with the Nuclei tool to scan for specific patterns or behaviors.
$ nuclei -u "URL" -t "http/technologies/microsoft/microsoft-iis-version.yaml"