EIP-2026-118792

This Perl script exploits an information leak vulnerability in Microsoft IIS by brute-forcing user accounts via dictionary attack. It sends HTTP POST requests to the '_AuthChangeUrl' endpoint and checks the response for a pattern indicating a successful password change, thereby confirming the existence of a user account.