diff --git a/scripts/minecraft-auth.nse b/scripts/minecraft-auth.nse index 8a914b145..4e0afc35c 100644 --- a/scripts/minecraft-auth.nse +++ b/scripts/minecraft-auth.nse @@ -1,5 +1,5 @@ description = [[ -Detects Minecraft username spoofing vulnerability. +Detects Minecraft offline/insecure authentication. Logging into a Minecraft multiplayer server requires online authentication at minecraft.net. Some Minecraft servers @@ -10,6 +10,8 @@ authentication letting anyone log in with any username. A determined individual can use modified client software to log into such insecure servers with a username registered to another player. + +http://notch.tumblr.com/post/942787216/minecraft-alpha-1-0-16-minecraft-server-0-1-1-and-a ]] --- @@ -19,7 +21,7 @@ player. author = "Toni Ruottu" license = "Same as Nmap--See http://nmap.org/book/man-legal.html" -categories = {"default", "vuln", "safe"} +categories = {"auth", "default", "safe"} require("bin") require("nmap") diff --git a/scripts/script.db b/scripts/script.db index 08aef4b10..bc70fac98 100644 --- a/scripts/script.db +++ b/scripts/script.db @@ -80,7 +80,7 @@ Entry { filename = "ldap-brute.nse", categories = { "auth", "intrusive", } } Entry { filename = "ldap-rootdse.nse", categories = { "discovery", "safe", } } Entry { filename = "ldap-search.nse", categories = { "discovery", "safe", } } Entry { filename = "lexmark-config.nse", categories = { "discovery", "safe", } } -Entry { filename = "minecraft-auth.nse", categories = { "default", "safe", "vuln", } } +Entry { filename = "minecraft-auth.nse", categories = { "auth", "default", "safe", } } Entry { filename = "modbus-discover.nse", categories = { "discovery", "intrusive", } } Entry { filename = "mongodb-databases.nse", categories = { "default", "discovery", "safe", } } Entry { filename = "mongodb-info.nse", categories = { "default", "discovery", "safe", } }