Collected research

Thirteen Years On: Advancing the Understanding of IIS Short File Name (SFN) Disclosure!

Soroush Dalili · soroush.me

Extends the IIS 8.3 short-file-name disclosure technique: response differences to crafted tilde and wildcard requests confirm hidden files and folders, and extra question-mark padding also reveals full long file names containing a tilde-digit pattern. Adds a probe that tells an IIS application apart from a directory or virtual directory.

Record

Researcher

Soroush Dalili

Published by

soroush.me

Topic

Other

In the archive

• Collected in the 2023 research round

Related sources

• SteelCon 2023 slides Whitepaper
• Independent short-name scanner
• Microsoft IIS tilde character vulnerability Whitepaper

Tags

• info-leak
• url-parsing
• aspnet
• dotnet
• side-channel
• tooling
• prior-art-extension

This page is the archive's own catalogue record. The research is the work of Soroush Dalili, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on 11 August 2026.