EIP-2026-118793

This script is a user enumeration tool for Microsoft IIS, exploiting an information leak vulnerability where different error messages are returned based on whether a user exists. It performs a dictionary attack against the IIS Authentication Manager to identify valid user accounts.