Alexander’s Blog

David Kierznowski recently released this ASP Auditor tool which allows you to identify ASP.NET servers that are configured incorrectly or are vulnerable. The tool is a beta tool and the current version is 1.0.

Usage: ./asp-audit.pl (opts) [host] [port]

(opts)
-h these usage instructions
-b brute force ASP.NET version using JS Validate directories
-m match against fingerprints
-v verbose messaging

The tool can be downloaded here. Samples of usages are available here.