tilde_enum | Takes a URL and checks the system for the tilde enum vuln | Security Testing library

tilde_enum is a Python library typically used in Testing, Security Testing applications. tilde_enum has no bugs, it has no vulnerabilities and it has low support. However tilde_enum build file is not available and it has a Non-SPDX License. You can download it from GitHub.

Takes a URL and then exploits the IIS tilde 8.3 enumeration vuln (and tries to get you full file and directory names. This is an attempt to take the cool POC scanner at and get you the rest of the file/directory names so you can retrieve them. Feed this script a URL and also a word list of potential file/dir names. The script will look up the roots in your word list and then try them with appropriate extensions. For word lists, the [fuzzdb] word lists are pretty good. We sometimes use the (or large or medium) for this work. This is not a directory enumerator (i.e., tries all words in a list against a web server). It will only find directories that have names longer than 8 characters (since only then will they have 8.3 names and be recognized by the vulnerability). You should still try to enumerate directories using a word list and [DirBuster] or Burp Intruder or something. Just as a note: on Windows computers you can view 8.3 names in the command prompt window by using the dir /x command. One of the columns will be the 8.3 name (if there is one).