PenTest/nmap
1
0
Fork 0
mirror of https://github.com/nmap/nmap.git synced 2026-01-03 13:19:04 +00:00
Code Issues Projects Releases Wiki Activity

NSEdoc fixes and cross-references

Browse Source
This commit is contained in:
dmiller
2017-01-23 20:37:22 +00:00
parent eb0bb2506f
commit 39915551a4
30 changed files with 86 additions and 16 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
scripts/http-cross-domain-policy.nse
View File

@@ -14,7 +14,7 @@ attacks and may allow attackers to access sensitive data. This script is useful
configurations and possible domain names available for purchase to exploit the application.
The script queries instantdomainsearch.com to lookup the domains. This functionality is
turned off by default, to enable it set the script argument http-crossdomainxml.domain-lookup.
turned off by default, to enable it set the script argument http-cross-domain-policy.domain-lookup.
References:
* http://sethsec.blogspot.com/2014/03/exploiting-misconfigured-crossdomainxml.html
@@ -26,13 +26,13 @@ References:
]]
---
-- @usage nmap --script http-crossdomainxml <target>
-- @usage nmap -p 80 --script http-crossdomainxml --script-args http.domain-lookup=true <target>
-- @usage nmap --script http-cross-domain-policy <target>
-- @usage nmap -p 80 --script http-cross-domain-policy --script-args http-cross-domain-policy.domain-lookup=true <target>
--
-- @output
-- PORT STATE SERVICE REASON
-- 8080/tcp open http-proxy syn-ack
-- | http-crossdomainxml-slaxml:
-- | http-cross-domain-policy:
-- | VULNERABLE:
-- | Cross-domain policy file (crossdomain.xml)
-- | State: VULNERABLE
@@ -75,7 +75,7 @@ References:
-- |_ https://www.adobe.com/devnet/articles/crossdomain_policy_file_spec.html
--
--
-- @args http-crossdomainxml.domain-lookup Boolean to check domain availability. Default:false
-- @args http-cross-domain-policy.domain-lookup Boolean to check domain availability. Default:false
--
-- @xmloutput
-- <elem key="title">Cross-domain and Client Access policies.</elem>