From 215f697171348d3280f48637451fc902ef981acd Mon Sep 17 00:00:00 2001 From: patrik Date: Sun, 18 Dec 2011 19:11:24 +0000 Subject: [PATCH] o Added new fingerprints to http-enum for Subversion, CVS and Apache Archiva [Duarte Silva] --- CHANGELOG | 3 +++ nselib/data/http-fingerprints.lua | 27 +++++++++++++++++++++++++++ 2 files changed, 30 insertions(+) diff --git a/CHANGELOG b/CHANGELOG index b452c6d0d..a1de6f399 100644 --- a/CHANGELOG +++ b/CHANGELOG @@ -1,5 +1,8 @@ # Nmap Changelog ($Id$); -*-text-*- +o Added new fingerprints to http-enum for Subversion, CVS and Apache Archiva + [Duarte Silva] + o [NSE] Added the script http-open-redirect that finds web pages that do not properly validate parameters used for HTTP redirects. [Martin Swende] diff --git a/nselib/data/http-fingerprints.lua b/nselib/data/http-fingerprints.lua index cb4dc7279..6cf2e308c 100644 --- a/nselib/data/http-fingerprints.lua +++ b/nselib/data/http-fingerprints.lua @@ -196,6 +196,33 @@ table.insert(fingerprints, { } }) +table.insert(fingerprints, { + category='general', + probes={ + {path='/repos/', method='GET'}, + {path='/repo/', method='GET'}, + {path='/svn/', method='GET'}, + {path='/cvs/', method='GET'} + }, + matches= { + {match='realm=".-Subversion.-"', output='Subversion Repository'}, + {match='', output='Possible code repository'} + } +}) + +table.insert(fingerprints, { + category='general', + probes={ + {path='/archiva/index.action', method='GET'}, + {path='/index.action', method='GET'} + }, + matches= { + {match='.*">Apache Archiva (.-)', output='Apache Archiva version \\1'}, + {match='Apache Archiva (%d-%..-)\n', output='Apache Archiva version \\1'}, + {match='Apache Archiva \\', output='Apache Archiva'} + } +}) + table.insert(fingerprints, { category='general', probes={