THIS IS A README FILE FOR IIS VULNERABILITY SCANNER
=======================

1. Introduction
2. Information
3. Version Information and Changes
4. Copyright and Disclaimer
5. How and why contact
6. Thanks to

==

1. INTRODUCTION
---------------

iisvs.pl is a vulnerability scanner for IIS webservers. It will check out the vulnerabilities in 
the vuln list file, which is by default "data.txt" that comes with this package. You can add/remove new vulnerabilities and vulnerable file chacks to it if you wish, but dont touch 
the heading. The default data file contains more than 1700 checks, this is a record for IIS 
vulnerability checks. It took time to compile the list that is a sum of all the IIS checks in 
tools like Xscan, nikto.pl, urlchk and a few others, whom I thank in the "Thanks to" section.

If you own an IIS server its an ultimate tool for you to check your server for vulnerabilities. Don't scan other servers without permission. I'm not responsible for what you do with this 
script.

To run it you have to have Perl installed. If you dont have perl then get it from 
http://www.activestate.com for your windows box. Perl has to come with default unix installation, but if you miss perl then get it from www.perl.com

Visit http://www.freewebs.com/okidan/ for updates.
You can also be a member of my forums at http://free.phpbb-host.org/okidan/

==

2. INFORMATION
---------------

Usage: perl iisvs.pl hostname

iisvs uses perl threads instead of fork().
There are some variables to be configured at the script file itself, take a look at the iisvs.pl 
file with a text editor for details. Although, the script has to work good by default. The script 
will output the checks from the data file to which the server responds with a response code 
other than 404, 400 and 500 (by default; you can change it from the source). These are codes for "File not found", "Bad request" and "Inernal Server Error" responses. 

Additionally with this package must come a "http_rc.txt" file with explanations of response 
codes that you get. If you find lets say a ".asp" file with response code 200, you have to look 
for a certain vulnerability for it, you have to scan on www.google.com for the " "filename" vulnerability" to find the way to gain access to the box via the known vulnerable file. The files that it finds as 200 are probably vulnerable, but the script wont exploit it for you. Search google and then look at www.securityfocus.com for exploits and solution for that particular 
vulnerability. If the project grows we will take our time to add comments to each vulnerable 
file and even add some exploits to the main package. But this is the first release, so be 
patient.

The output file will be named <Hostname>.txt by default. You can change it in the script. 
All the logged vulnerabilities will be sorted by their response codes in the end. But till the end of the scan they will remain in the order of the vulnerability data file. The logging will be 
improved in the next releases.

==

3. VERSION INFORMATION AND CHANGES
---------------

This is version 1.0 - the first release.

==

4. COPYRIGHT AND DISCLAIMER
---------------

OkIDaN has the rights of the original script "iisvs.pl". You can distribute it freely, though. You 
can modify the code too, but you must include this "readme.txt" file, and NOT modify the file
headings of "iisvs.pl" and the "data.txt" files, wherever you post/send/put and distribute this
program.

Im not responsible for what you do with this program. It is intended to scan your own server, 
or the server you have permission to scan. Use it on your own, and use it wisely. In some 
countries scanning servers for vulnerabilities is illegal and can get you caught. Again, USE IT 
WISELY.

5. HOW & WHY CONTACT
---------------

If you want to help in the development of this project, want to contribute vulnerability 
checks, or even one. Then dont hesitate to write to me: okidan@yandex.ru or talk to me on 
MSN: okidan_nadiko@yahoo.com.

Contact me if you find any bugs. I would appreciate it very much.

Contact me if you have any other comments. I will appreciate any help in the development 
of this project and I will surely give back.

==

6. THANKS TO
---------------

I want to thank the engineers and developers of the following programs for makin their 
vulnerability data file open source. I have compiled my vulnerability list from the following 
tools:

Xscan
Nikto.pl
Urlchk
Twwwscan
IIS Scanner by Shen139 for hacklab project
IIS Scanner by Shizoprenic - Xnuxer Research Center 2002
Whisker
CGIscan from Wang Products
GFI Langurad Network Security Scanner

Also thanks to Rain Forest Puppy just for what he does.

Thanks to Hackerlounge for being what they are. This is the only forum where I post 
regularly. http://www.hackerlounge.com

Shouts to all who know me.

==

--===EOF===--