How about these: 1. NTObjectives has the Fire and Water toolkit, which includes NTOWeb, for scanning IIS servers.
2. Mdutil ships w/ IIS. It will pull the settings from your IIS setup, and you'll be able to determine if your setup is relatively secure or not. Of course, that assumes that you know something about the web server you're running. 3. Whisker from RFP __________________________________________________ Do you Yahoo!? Yahoo! Mail Plus - Powerful. Affordable. Sign up now. http://mailplus.yahoo.com
