Skip to content

IIS:

Enumeration

Turn discovery into specifics: services, users, and exposed resources. Confirm what’s reachable.

1 guide • Created Dec 28, 2025 • Updated Mar 29, 2026
1 guide

IIS enumeration

Techniques for enumerating Microsoft IIS web servers, uncovering versions, directories, virtual hosts, and misconfigurations to identify attack surfaces.

IIS enumeration maps the web server's configuration and application landscape. Version detection from HTTP headers and error pages tells you which IIS features and vulnerabilities apply.

Virtual directory discovery, application pool mapping, and handler identification reveal the server's structure. Default files, known paths like /aspnet_client/, and response header analysis expose the technology stack and potential entry points.

The subpages cover version fingerprinting, directory and application discovery, and handler enumeration techniques.