Description: The purpose of ASP Auditor is to identify vulnerable and weakly configured ASP.NET servers.
Usage:
$ ./asp-audit.pl
ASP Audit v1.0 (BETA) [ david.kierznowski@gmail.com ]
Usage: ./asp-audit.pl (opts) [host] [port]
(opts)
-h these usage instructions
-b brute force ASP.NET version using JS Validate
directories.
-m match against fingerprints
-v verbose messaging
Some examples can be seen below:
$ ./asp-audit.pl labs.microsoft.com
Target: labs.microsoft.com
Server Software: Microsoft-IIS/6.0
ASP Framework: YES
ASP Simple Version: 2.0.50727
ASP Specific Version: Unknown
ASP verbose messages: No
ASP Validate: No
Default Error Messages: No
$ ./asp-audit.pl -m labs.microsoft.com
Target: labs.microsoft.com
Server Software: Microsoft-IIS/6.0
ASP Framework: YES
ASP Simple Version: 2.0.50727
ASP Specific Version: Unknown
ASP verbose messages: No
ASP Validate: No
Default Error Messages: No
Fingerprint matches:
2.0.50727.07 Version 2.0 (Visual Studio.NET 2005 CTP) Aug 2005
2.0.50727.26 Version 2.0 (Visual Studio.NET 2005 RC / SQL Server 2005 CTP) Sep 2005
2.0.50727.42 Version 2.0 RTM (Visual Studio.NET 2005 RTM / SQL Server 2005 RTM) Nov 2005
$ ./asp-audit.pl *hidden*
Target: *hidden*
Server Software: Microsoft-IIS/6.0
ASP Framework: YES
ASP Simple Version: Unknown
ASP Specific Version: Unknown
ASP verbose messages: No
ASP Validate: No
Default Error Messages: YES
$ ./asp-audit.pl -b *hidden*
Target: *hidden*
Server Software: Microsoft-IIS/6.0
ASP Framework: YES
ASP Simple Version: Unknown
ASP Specific Version: Unknown
ASP verbose messages: No
ASP Validate: No
Default Error Messages: YES
Found: aspnet_client/system_web/1_1_4322
Found: aspnet_client/system_web/2_0_50727
Property
Value
Name
ASP Auditor v1.0 BETA
Keywords
Filesize
10.14 kB
Google Ads
Filetype
gz (Mime Type: application/x-compressed-tar)
Creator
Everybody
Created On:
09/19/2006 00:00
Viewers
Everybody
Maintained by
Zinho
Hits
14 Hits
Last updated on
12/31/1969 16:00
Homepage
CRC Checksum
MD5 Checksum
You need to login to download texts/tools. Register here, it's fast and free!
