IIS (Internet Information Services)
Directory map
Summary
Microsoft IIS is Windows’ built-in web server and is commonly encountered in enterprise environments. Older versions (7.5 and earlier) are vulnerable to tilde enumeration, which exploits the Windows 8.3 short file name format to discover hidden files and directories that would otherwise be invisible to standard enumeration.
The attack works by sending HTTP requests with progressively longer character sequences after the tilde (~) character. When the server returns a 200 OK instead of a 404, a valid short-name prefix has been found. The full directory or file name can then be brute-forced using a targeted wordlist and Gobuster. This technique can reveal upload directories, configuration files, and other sensitive resources not linked from the application’s visible pages.