Free Microsoft IIS Security Scanner

Scan IIS for vulnerabilities with NVD API integration, active CVE verification, and patch detection. Free security scanner with instant results.

100% Free
100K+ CVEs
Active Verification
<60s Scan Time
https://

No credit card required • Instant results

NVD API

Real-time CVE data from NIST NVD (100K+ vulnerabilities) with CVSS 3.1 scoring

Active Verification

WebDAV detection, Range header testing, HTTP/2 checks to confirm vulnerabilities

Patch Detection

Response pattern analysis to detect if patches are installed (MS15-034, etc.)

12+ Checks

Version detection, HTTP methods, shortname vuln, web.config, headers, debug mode

What We Scan For

CVE Vulnerabilities

  • • CVE-2017-7269 (WebDAV RCE)
  • • CVE-2022-21907 (HTTP.sys RCE)
  • • CVE-2015-1635 (MS15-034)
  • • 100K+ CVEs from NVD API

Misconfigurations

  • • web.config exposure
  • • ASP.NET debug mode
  • • Directory browsing
  • • IIS shortname vulnerability

Security Testing

  • • Dangerous HTTP methods
  • • WebDAV exposure
  • • Security headers
  • • Version fingerprinting

Why Choose ScanTower?

FeatureScanTowerIIScanNmapNikto
NVD API Integration✓✗✗✗
Active CVE Verification✓✗Partial✗
Patch Detection✓✗✗✗
CVE Database Size100K+~20~15~50
Web Interface✓✗✗✗
Scan Speed<60s2-5min3-10min5-15min

Critical IIS Vulnerabilities We Detect

CVE-2017-7269 - IIS 6.0 WebDAV Buffer Overflow

CVSS 10.0

Remote code execution via WebDAV PROPFIND requests. Active verification: OPTIONS + PROPFIND test confirms WebDAV enabled.

Affects: IIS 6.0 (Windows Server 2003) • Fix: Disable WebDAV (no patch available)

CVE-2015-1635 - HTTP.sys RCE (MS15-034)

CVSS 7.5

Remote code execution via Range headers. Patch detection: 416 status = Patched, 200 = Vulnerable.

Affects: IIS 7.5/8.0/8.5 (Win 7/8/2008/2012) • Patch: MS15-034 (KB3042553)

IIS Short Name Vulnerability (MS12-057)

Medium

8.3 filename enumeration reveals hidden files. Detection: OPTIONS */~* request with status code analysis.

Affects: All IIS versions • Fix: fsutil behavior set disable8dot3 1

Frequently Asked Questions

What makes this IIS scanner different?

ScanTower is the only IIS scanner with NIST NVD API integration (100K+ real-time CVEs), active vulnerability verification (WebDAV detection, patch testing), and sub-60-second scan times. Traditional tools use outdated hardcoded CVE lists.

What is active CVE verification?

We don't just match versions to CVE lists-we test if vulnerabilities are actually exploitable. For CVE-2017-7269, we verify WebDAV is enabled. For MS15-034, we test if patches are applied via Range header responses. This eliminates false positives.

Is it safe for production servers?

Yes. We use only safe, read-only operations (OPTIONS, GET, HEAD, PROPFIND). No exploit payloads or crash triggers. All tests have 8-second timeouts. Safe for production IIS servers.

What IIS versions are supported?

IIS 6.0 through 10.0 (Windows Server 2003-2022). We fingerprint IIS versions, Windows Server editions, ASP.NET runtime (2.0-4.8), and .NET Framework versions using multiple detection methods.

How long does a scan take?

Most scans complete in under 60 seconds. NVD CVE queries are cached (24-hour TTL) for fast subsequent scans. This is 3-10x faster than CLI tools like Nikto or Nmap.

Want the Complete Picture?

FREE

This IIS Security Scanner is great for a quick check, but our Full Security Scan gives you a comprehensive security audit in one go.