diff --git a/scripts/http-webdav-unicode-bypass.nse b/scripts/http-iis-webdav-vuln.nse similarity index 91% rename from scripts/http-webdav-unicode-bypass.nse rename to scripts/http-iis-webdav-vuln.nse index c7c1c9c04..5e66d3ec0 100644 --- a/scripts/http-webdav-unicode-bypass.nse +++ b/scripts/http-iis-webdav-vuln.nse @@ -12,7 +12,7 @@ The module is based on the Metasploit modules/auxiliary/scanner/http/wmap_dir_we -- -- @output -- 80/tcp open http syn-ack --- |_ http-webdav-unicode-bypass: Vulnerable folders discovered: /secret, /webdav +-- |_ http-iis-webdav-vuln: Vulnerable folders discovered: /secret, /webdav -- -- @args webdavfolder Selects a single folder to use, instead of using a built-in list -- @args folderdb The filename of an alternate list of folders. @@ -62,18 +62,18 @@ local function go_single(host, port, folder) if(response.status == 401) then local vuln_response - stdnse.print_debug(1, "http-webdav-unicode-bypass: Found protected folder (401): %s", folder) + stdnse.print_debug(1, "http-iis-webdav-vuln: Found protected folder (401): %s", folder) vuln_response = get_response(host, port, "/%c0%af" .. string.sub(folder, 2)) if(vuln_response.status == 207) then - stdnse.print_debug(1, "http-webdav-unicode-bypass: Folder seems vulnerable: %s", folder) + stdnse.print_debug(1, "http-iis-webdav-vuln: Folder seems vulnerable: %s", folder) return enum_results.VULNERABLE else - stdnse.print_debug(2, "http-webdav-unicode-bypass: Folder not vulnerable: %s", folder) + stdnse.print_debug(2, "http-iis-webdav-vuln: Folder not vulnerable: %s", folder) return enum_results.NOT_VULNERABLE end else - stdnse.print_debug(3, "http-webdav-unicode-bypass: Not a protected folder (%s): %s", response['status-line'], folder) + stdnse.print_debug(3, "http-iis-webdav-vuln: Not a protected folder (%s): %s", response['status-line'], folder) return enum_results.UNKNOWN end end diff --git a/scripts/script.db b/scripts/script.db index 6b8a0d2af..d28bb473c 100644 --- a/scripts/script.db +++ b/scripts/script.db @@ -13,6 +13,7 @@ Entry { filename = "ftp-bounce.nse", categories = { "default", "intrusive", } } Entry { filename = "ftp-brute.nse", categories = { "auth", "intrusive", } } Entry { filename = "html-title.nse", categories = { "default", "discovery", "safe", } } Entry { filename = "http-auth.nse", categories = { "auth", "default", "intrusive", } } +Entry { filename = "http-iis-webdav-vuln.nse", categories = { "discovery", } } Entry { filename = "http-open-proxy.nse", categories = { "default", "discovery", "external", "intrusive", } } Entry { filename = "http-passwd.nse", categories = { "intrusive", "vuln", } } Entry { filename = "http-trace.nse", categories = { "discovery", } }