From 940dc91637a88be56213b173f1fb94c9bfa6c8fc Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Laban=20Sk=C3=B6llermark?= <65019367+LabanSkollerDefensify@users.noreply.github.com> Date: Wed, 23 Sep 2020 14:49:24 +0200 Subject: [PATCH] Add NDES and SCEP URLs Microsoft Network Device Enrollment Service (NDES) is used to enroll devices such as Cisco routers and iPhones with a device certificate issued by Active Directory Certificate Services (ADCS) Certification Authority (CA) via the Simple Certificate Enrollment Protocol (SCEP). Add the following URLs: * /certsrv/mscep_admin - admin page of Network Device Enrollment Service (NDES) * /certsrv/mscep/mscep.dll - Simple Certificate Enrollment Protocol (SCEP) server endpoint --- Discovery/Web-Content/IIS.fuzz.txt | 2 ++ 1 file changed, 2 insertions(+) diff --git a/Discovery/Web-Content/IIS.fuzz.txt b/Discovery/Web-Content/IIS.fuzz.txt index 2cb6c8f..49cf968 100644 --- a/Discovery/Web-Content/IIS.fuzz.txt +++ b/Discovery/Web-Content/IIS.fuzz.txt @@ -28,6 +28,8 @@ /certcontrol/ /certenroll/ /certsrv/ +/certsrv/mscep_admin +/certsrv/mscep/mscep.dll /cfide/..%255c..%255c..%255c..%255cwinnt/system32/cmd.exe?/c+dir /CFIDE/Administrator/startstop.html /cgi/