PenTest/nmap
1
0
Fork 0
mirror of https://github.com/nmap/nmap.git synced 2025-12-29 02:49:01 +00:00
Code Issues Projects Releases Wiki Activity

Fixes false positives in RFC1918 IP address detection

Browse Source
This commit is contained in:
nnposter
2017-02-23 03:30:48 +00:00
parent cae3e7977a
commit 3ac81b4804
1 changed files with 5 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files

13
scripts/http-webdav-scan.nse
View File

@@ -104,14 +104,11 @@ end
-- a function to extract internal ip addresses from PROPFIND response.
local function getIPs(body)
local ip_pat1 = '192%.168%.%d+%.%d+'
local ip_pat2 = '10%.%d+%.%d+%.%d+'
local ip_pat3 = '172%.%d+%.%d+%.%d+'
local ip_pats = {
ip_pat1,
ip_pat2,
ip_pat3,
}
local ip_pats = {'%f[%d]192%.168%.%d+%.%d+',
'%f[%d]10%.%d+%.%d+%.%d+',
'%f[%d]172%.1[6-9]%.%d+%.%d+',
'%f[%d]172%.2%d%.%d+%.%d+',
'%f[%d]172%.3[01]%.%d+%.%d+'}
local result = {}
for _, ip_pat in pairs(ip_pats) do
for ip in body:gmatch(ip_pat) do