Free Microsoft IIS Security Scanner

Scan IIS for vulnerabilities with NVD API integration, active CVE verification, and patch detection. Free security scanner with instant results.

  • Free
  • No signup required
  • Live NVD CVE data
  • Active verification
https://

No credit card required • Instant results

NVD API

Real-time CVE data from NIST NVD (100K+ vulnerabilities) with CVSS 3.1 scoring

Active Verification

WebDAV detection, Range header testing, HTTP/2 checks to confirm vulnerabilities

Patch Detection

Response pattern analysis to detect if patches are installed (MS15-034, etc.)

12+ Checks

Version detection, HTTP methods, shortname vuln, web.config, headers, debug mode

What We Scan For

CVE Vulnerabilities

  • • CVE-2017-7269 (WebDAV RCE)
  • • CVE-2022-21907 (HTTP.sys RCE)
  • • CVE-2015-1635 (MS15-034)
  • • 100K+ CVEs from NVD API

Misconfigurations

  • • web.config exposure
  • • ASP.NET debug mode
  • • Directory browsing
  • • IIS shortname vulnerability

Security Testing

  • • Dangerous HTTP methods
  • • WebDAV exposure
  • • Security headers
  • • Version fingerprinting

Why Choose ScanTower?

FeatureScanTowerIIScanNmapNikto
NVD API Integration✓✗✗✗
Active CVE Verification✓✗Partial✗
Patch Detection✓✗✗✗
CVE Database Size100K+~20~15~50
Web Interface✓✗✗✗
Scan Speed<60s2-5min3-10min5-15min

Critical IIS Vulnerabilities We Detect

CVE-2017-7269 - IIS 6.0 WebDAV Buffer Overflow

CVSS 10.0

Remote code execution via WebDAV PROPFIND requests. Active verification: OPTIONS + PROPFIND test confirms WebDAV enabled.

Affects: IIS 6.0 (Windows Server 2003) • Fix: Disable WebDAV (no patch available)

CVE-2015-1635 - HTTP.sys RCE (MS15-034)

CVSS 7.5

Remote code execution via Range headers. Patch detection: 416 status = Patched, 200 = Vulnerable.

Affects: IIS 7.5/8.0/8.5 (Win 7/8/2008/2012) • Patch: MS15-034 (KB3042553)

IIS Short Name Vulnerability (MS12-057)

Medium

8.3 filename enumeration reveals hidden files. Detection: OPTIONS */~* request with status code analysis.

Affects: All IIS versions • Fix: fsutil behavior set disable8dot3 1

Frequently Asked Questions

What makes this IIS scanner different?

ScanTower checks IIS against live CVE data from the NIST NVD rather than a hardcoded list, actively verifies what it finds (WebDAV detection, patch testing), and finishes in under a minute.

What is active CVE verification?

We don't just match versions to CVE lists-we test if vulnerabilities are actually exploitable. For CVE-2017-7269, we verify WebDAV is enabled. For MS15-034, we test if patches are applied via Range header responses. This eliminates false positives.

Is it safe for production servers?

Yes. We use only safe, read-only operations (OPTIONS, GET, HEAD, PROPFIND). No exploit payloads or crash triggers. All tests have 8-second timeouts. Safe for production IIS servers.

What IIS versions are supported?

IIS 6.0 through 10.0 (Windows Server 2003-2022). We fingerprint IIS versions, Windows Server editions, ASP.NET runtime (2.0-4.8), and .NET Framework versions using multiple detection methods.

How long does a scan take?

Most scans complete in under 60 seconds. NVD CVE queries are cached (24-hour TTL) for fast subsequent scans. This is 3-10x faster than CLI tools like Nikto or Nmap.

This is one check. A full scan runs them all.

Free

The IIS Security Scanner covers one area. A full scan runs every check on the same site in one go, so nothing it does not reach goes unnoticed.

Covered by this check

  • NVD API integration (100K+ CVEs)
  • Active CVE verification
  • Patch detection & response analysis
  • IIS version & ASP.NET fingerprinting
  • WebDAV & HTTP method testing
  • IIS shortname vulnerability check
  • web.config & debug mode detection
  • Security headers validation

Added by a full scan

  • SSL/TLS certificate validation
  • WordPress vulnerability scanning
  • Malware & script detection
  • DNS security (DNSSEC, CAA)
  • Domain reputation analysis
  • Certificate transparency logs
  • Port scanning & service detection
  • And 8+ more security checks
https://

Want it checked automatically? A free account rescans one site every week and emails you new findings. No credit card.

Start free monitoring

More misconfiguration and infrastructure tools

Web Misconfiguration Scanner

Find exposed config files, .env files, backups and admin panels.

Security Headers Checker

Audit CSP, HSTS and other HTTP security headers.

SSL Certificate Checker

Validate the certificate, chain and expiry of any site.

Website Technology Checker

Identify the full tech stack: CMS, frameworks, servers and more.

Is My Site Compromised?

Run a full-spectrum compromise check for malware, skimmers and intrusion signs.