From 4bc9398885aebd15456885c5b4a5055fb80b7761 Mon Sep 17 00:00:00 2001 From: liquidsec Date: Sat, 4 May 2024 11:57:03 -0400 Subject: [PATCH 1/2] dotnet audit preset --- bbot/presets/web/dotnet-audit.yml | 21 +++++++++++++++++++++ 1 file changed, 21 insertions(+) create mode 100644 bbot/presets/web/dotnet-audit.yml diff --git a/bbot/presets/web/dotnet-audit.yml b/bbot/presets/web/dotnet-audit.yml new file mode 100644 index 000000000..7656d9017 --- /dev/null +++ b/bbot/presets/web/dotnet-audit.yml @@ -0,0 +1,21 @@ +description: Comprehensive scan for all IIS/.NET specific modules and module settings + + +include: + - iis-shortnames + +modules: + - httpx + - ffuf_shortnames + - ffuf + - telerik + - ajaxpro + - dotnetnuke + +config: + modules: + ffuf: + extensions: asp,aspx,ashx,asmx + telerik: + exploit_RAU_crypto: True + From f7b91a599eebb031fb858dc15991e607e513102d Mon Sep 17 00:00:00 2001 From: Paul Mueller Date: Wed, 19 Jun 2024 09:04:34 -0400 Subject: [PATCH 2/2] Little updates --- bbot/presets/web/dotnet-audit.yml | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/bbot/presets/web/dotnet-audit.yml b/bbot/presets/web/dotnet-audit.yml index 7656d9017..bbc5e201e 100644 --- a/bbot/presets/web/dotnet-audit.yml +++ b/bbot/presets/web/dotnet-audit.yml @@ -6,6 +6,7 @@ include: modules: - httpx + - badsecrets - ffuf_shortnames - ffuf - telerik @@ -15,7 +16,7 @@ modules: config: modules: ffuf: - extensions: asp,aspx,ashx,asmx + extensions: asp,aspx,ashx,asmx,ascx telerik: exploit_RAU_crypto: True