# Enumeration

> Turn discovery into specifics: services, users, and exposed resources. Confirm what’s reachable.

- **URL:** https://hackindex.io/services/iis/enumeration
- **Service:** [IIS](https://hackindex.io/services/iis.md)
- **Tags:** services, users, endpoints
- **Published:** 2026-01-18
- **Updated:** 2026-03-29

IIS enumeration maps the web server's configuration and application landscape. Version detection from HTTP headers and error pages tells you which IIS features and vulnerabilities apply.

Virtual directory discovery, application pool mapping, and handler identification reveal the server's structure. Default files, known paths like `/aspnet_client/`, and response header analysis expose the technology stack and potential entry points.

The subpages cover version fingerprinting, directory and application discovery, and handler enumeration techniques.

## Guides

- [IIS enumeration](https://hackindex.io/services/iis/enumeration/iis-enumeration.md): Techniques for enumerating Microsoft IIS web servers, uncovering versions, directories, virtual hosts, and misconfigurations to identify attack surfaces.