mirror of
https://github.com/nmap/nmap.git
synced 2025-12-06 04:31:29 +00:00
Spelling corrections. Fixes #1160
This commit is contained in:
@@ -652,7 +652,7 @@ running on nonstandard ports. Rather than slow the Nmap scan by
|
|||||||
running extensive version detection (<option>-sV
|
running extensive version detection (<option>-sV
|
||||||
--version-all</option>) so that Nmap will recognize the <literal>ms-sql</literal>
|
--version-all</option>) so that Nmap will recognize the <literal>ms-sql</literal>
|
||||||
service, you can force the <literal>ms-sql-config</literal> script to run against all the
|
service, you can force the <literal>ms-sql-config</literal> script to run against all the
|
||||||
targetted hosts and ports by specifying <option>--script
|
targeted hosts and ports by specifying <option>--script
|
||||||
+ms-sql-config</option>.</para>
|
+ms-sql-config</option>.</para>
|
||||||
|
|
||||||
<para>
|
<para>
|
||||||
|
|||||||
@@ -491,7 +491,7 @@ int IPv4Header::setNextProto(u8 p){
|
|||||||
|
|
||||||
|
|
||||||
/** Sets field "next protocol" to the number that corresponds to the supplied
|
/** Sets field "next protocol" to the number that corresponds to the supplied
|
||||||
* protocol name. Currently onyl TCP, UDP and ICMP are supported. Any
|
* protocol name. Currently only TCP, UDP and ICMP are supported. Any
|
||||||
* help to extend this functionality would be appreciated. For a list of all
|
* help to extend this functionality would be appreciated. For a list of all
|
||||||
* proto names and numbers check:
|
* proto names and numbers check:
|
||||||
* http://www.iana.org/assignments/protocol-numbers/ */
|
* http://www.iana.org/assignments/protocol-numbers/ */
|
||||||
|
|||||||
@@ -471,7 +471,7 @@ u8 IPv6Header::getNextHeader() const {
|
|||||||
|
|
||||||
|
|
||||||
/** Sets field "next header" to the number that corresponds to the supplied
|
/** Sets field "next header" to the number that corresponds to the supplied
|
||||||
* protocol name. Currently onyl TCP, UDP and ICMP are supported. Any
|
* protocol name. Currently only TCP, UDP and ICMP are supported. Any
|
||||||
* help to extend this functionality would be appreciated. For a list of all
|
* help to extend this functionality would be appreciated. For a list of all
|
||||||
* proto names and numbers check:
|
* proto names and numbers check:
|
||||||
* http://www.iana.org/assignments/protocol-numbers/ */
|
* http://www.iana.org/assignments/protocol-numbers/ */
|
||||||
|
|||||||
@@ -1820,7 +1820,7 @@ bool PacketParser::is_response(PacketElement *sent, PacketElement *rcvd){
|
|||||||
*
|
*
|
||||||
* It returns NULL if no transport layer header is found.
|
* It returns NULL if no transport layer header is found.
|
||||||
*
|
*
|
||||||
* Note that this method onyl understands IPv4, IPv6 (and its
|
* Note that this method only understands IPv4, IPv6 (and its
|
||||||
* extension headers) and Ethernet. If the supplied packet contains
|
* extension headers) and Ethernet. If the supplied packet contains
|
||||||
* something different before the tranport layer, NULL will be returned.
|
* something different before the tranport layer, NULL will be returned.
|
||||||
* */
|
* */
|
||||||
|
|||||||
@@ -2806,7 +2806,7 @@ const char *ippackethdrinfo(const u8 *packet, u32 len, int detail) {
|
|||||||
|
|
||||||
/* Basic check to ensure we have an IPv4 datagram attached */
|
/* Basic check to ensure we have an IPv4 datagram attached */
|
||||||
/* TODO: We should actually check the datagram checksum to
|
/* TODO: We should actually check the datagram checksum to
|
||||||
* see if it validates becuase just checking the version number
|
* see if it validates because just checking the version number
|
||||||
* is not enough. On average, if we get random data 1 out of
|
* is not enough. On average, if we get random data 1 out of
|
||||||
* 16 (2^4bits) times we will have value 4. */
|
* 16 (2^4bits) times we will have value 4. */
|
||||||
if ((ip2->ip_v != 4) || ((ip2->ip_hl * 4) < 20) || ((ip2->ip_hl * 4) > 60)) {
|
if ((ip2->ip_v != 4) || ((ip2->ip_hl * 4) < 20) || ((ip2->ip_hl * 4) > 60)) {
|
||||||
@@ -3402,7 +3402,7 @@ static int route_dst_generic(const struct sockaddr_storage *dst,
|
|||||||
netutil_fatal("%s passed a NULL dst address", __func__);
|
netutil_fatal("%s passed a NULL dst address", __func__);
|
||||||
|
|
||||||
if(spoofss!=NULL){
|
if(spoofss!=NULL){
|
||||||
/* Throughout the rest of this function we only change rnfo->srcaddr if the source isnt spoofed */
|
/* Throughout the rest of this function we only change rnfo->srcaddr if the source isn't spoofed */
|
||||||
memcpy(&rnfo->srcaddr, spoofss, sizeof(rnfo->srcaddr));
|
memcpy(&rnfo->srcaddr, spoofss, sizeof(rnfo->srcaddr));
|
||||||
/* The device corresponding to this spoofed address should already have been set elsewhere. */
|
/* The device corresponding to this spoofed address should already have been set elsewhere. */
|
||||||
assert(device!=NULL && device[0]!='\0');
|
assert(device!=NULL && device[0]!='\0');
|
||||||
|
|||||||
@@ -3144,7 +3144,7 @@ kill_children;
|
|||||||
|
|
||||||
{
|
{
|
||||||
local $xfail = 1;
|
local $xfail = 1;
|
||||||
test "SOCKS5 client, server sends unkown code",
|
test "SOCKS5 client, server sends unknown code",
|
||||||
sub {
|
sub {
|
||||||
my ($pid,$code);
|
my ($pid,$code);
|
||||||
my $buf="";
|
my $buf="";
|
||||||
|
|||||||
@@ -1,7 +1,7 @@
|
|||||||
/*
|
/*
|
||||||
* Binding for the libssh2 library. Note that there is not a one-to-one correspondance
|
* Binding for the libssh2 library. Note that there is not a one-to-one correspondance
|
||||||
* between functions in libssh2 and the binding.
|
* between functions in libssh2 and the binding.
|
||||||
* Currently, during the ssh2 handshake, a call to nsock.recieve may result in an EOF
|
* Currently, during the ssh2 handshake, a call to nsock.receive may result in an EOF
|
||||||
* error. This appears to only occur when stressing the ssh server (ie during a brute
|
* error. This appears to only occur when stressing the ssh server (ie during a brute
|
||||||
* force attempt) or while behind a restrictive firewall/IDS.
|
* force attempt) or while behind a restrictive firewall/IDS.
|
||||||
* by Devin Bjelland
|
* by Devin Bjelland
|
||||||
|
|||||||
@@ -34,7 +34,7 @@ extern "C" {
|
|||||||
|
|
||||||
/*
|
/*
|
||||||
** =========================================================================
|
** =========================================================================
|
||||||
** compile time options wich determine available functionality
|
** compile time options which determine available functionality
|
||||||
** =========================================================================
|
** =========================================================================
|
||||||
*/
|
*/
|
||||||
|
|
||||||
@@ -596,16 +596,16 @@ static int lzstream_decompress(lua_State *L) {
|
|||||||
|
|
||||||
static int lzstream_readline(lua_State *L) {
|
static int lzstream_readline(lua_State *L) {
|
||||||
lz_stream *s;
|
lz_stream *s;
|
||||||
int sucess;
|
int success;
|
||||||
|
|
||||||
s = lzstream_check(L, lua_upvalueindex(1), LZ_INFLATE);
|
s = lzstream_check(L, lua_upvalueindex(1), LZ_INFLATE);
|
||||||
sucess = lz_read_line(L, s);
|
success = lz_read_line(L, s);
|
||||||
|
|
||||||
if (s->error != Z_OK) {
|
if (s->error != Z_OK) {
|
||||||
return lz_pushresult(L, s);
|
return lz_pushresult(L, s);
|
||||||
}
|
}
|
||||||
|
|
||||||
if (sucess) {
|
if (success) {
|
||||||
return 1;
|
return 1;
|
||||||
} else {
|
} else {
|
||||||
/* EOF */
|
/* EOF */
|
||||||
|
|||||||
@@ -101,7 +101,7 @@ function _ENV.pack (format, ...)
|
|||||||
n = #n == 0 and 1 or tointeger(n)
|
n = #n == 0 and 1 or tointeger(n)
|
||||||
if o == "H" then
|
if o == "H" then
|
||||||
-- hex string
|
-- hex string
|
||||||
-- N.B. n is the reptition
|
-- N.B. n is the repetition
|
||||||
assert(n > 0, "n cannot be 0") -- original bin library allowed this, it doesn't make sense
|
assert(n > 0, "n cannot be 0") -- original bin library allowed this, it doesn't make sense
|
||||||
local new = "=" -- !! in original bin library, hex strings are always native
|
local new = "=" -- !! in original bin library, hex strings are always native
|
||||||
for j = i, i+n-1 do
|
for j = i, i+n-1 do
|
||||||
@@ -113,7 +113,7 @@ function _ENV.pack (format, ...)
|
|||||||
return new
|
return new
|
||||||
elseif o == "B" then
|
elseif o == "B" then
|
||||||
-- bit string
|
-- bit string
|
||||||
-- N.B. n is the reptition
|
-- N.B. n is the repetition
|
||||||
error "pack option \"B\" is no longer supported"
|
error "pack option \"B\" is no longer supported"
|
||||||
elseif o == "p" then
|
elseif o == "p" then
|
||||||
i = i + n
|
i = i + n
|
||||||
@@ -126,7 +126,7 @@ function _ENV.pack (format, ...)
|
|||||||
return ("s4"):rep(n)
|
return ("s4"):rep(n)
|
||||||
elseif o == "A" then
|
elseif o == "A" then
|
||||||
-- an unterminated string
|
-- an unterminated string
|
||||||
-- N.B. n is the reptition
|
-- N.B. n is the repetition
|
||||||
assert(n > 0, "n cannot be 0") -- original bin library allowed this, it doesn't make sense
|
assert(n > 0, "n cannot be 0") -- original bin library allowed this, it doesn't make sense
|
||||||
local new = ""
|
local new = ""
|
||||||
for j = i, i+n-1 do
|
for j = i, i+n-1 do
|
||||||
|
|||||||
@@ -699,7 +699,7 @@ Torrent =
|
|||||||
|
|
||||||
if not timeout or type(timeout)~="number" then timeout = 30 end
|
if not timeout or type(timeout)~="number" then timeout = 30 end
|
||||||
|
|
||||||
-- peer node table aka the condvar!
|
-- peer node table a.k.a. the condvar!
|
||||||
local pnt = {}
|
local pnt = {}
|
||||||
pnt.peers = {}
|
pnt.peers = {}
|
||||||
pnt.peers_dht_ping = self.peers
|
pnt.peers_dht_ping = self.peers
|
||||||
|
|||||||
@@ -155,7 +155,7 @@
|
|||||||
-- Following is an example how it can be done for FTP brute.
|
-- Following is an example how it can be done for FTP brute.
|
||||||
--
|
--
|
||||||
-- <code>
|
-- <code>
|
||||||
-- local line = <responce from the server>
|
-- local line = <response from the server>
|
||||||
--
|
--
|
||||||
-- if(string.match(line, "^230")) then
|
-- if(string.match(line, "^230")) then
|
||||||
-- stdnse.debug1("Successful login: %s/%s", user, pass)
|
-- stdnse.debug1("Successful login: %s/%s", user, pass)
|
||||||
@@ -701,7 +701,7 @@ Engine = {
|
|||||||
|
|
||||||
status, response = driver:connect()
|
status, response = driver:connect()
|
||||||
|
|
||||||
-- Temporary workaround. Did not connect sucessfully
|
-- Temporary workaround. Did not connect successfully
|
||||||
-- due to stressed server
|
-- due to stressed server
|
||||||
if not status then
|
if not status then
|
||||||
-- We have to first check whether the response is a brute.Error
|
-- We have to first check whether the response is a brute.Error
|
||||||
|
|||||||
@@ -19,7 +19,7 @@ _ENV = stdnse.module("coap", stdnse.seeall)
|
|||||||
--
|
--
|
||||||
-- This library does not currently implement the entire CoAP protocol,
|
-- This library does not currently implement the entire CoAP protocol,
|
||||||
-- only those behaviours which are necessary for existing scripts are
|
-- only those behaviours which are necessary for existing scripts are
|
||||||
-- included. Extending to accomodate additional control packets should
|
-- included. Extending to accommodate additional control packets should
|
||||||
-- not be difficult.
|
-- not be difficult.
|
||||||
--
|
--
|
||||||
-- @author "Mak Kolybabi <mak@kolybabi.com>"
|
-- @author "Mak Kolybabi <mak@kolybabi.com>"
|
||||||
|
|||||||
@@ -110,7 +110,7 @@
|
|||||||
-- * table to file in CSV or text formats
|
-- * table to file in CSV or text formats
|
||||||
--
|
--
|
||||||
-- Revised 2015/19/08 - v0.5 - Gioacchino Mazzurco <gmazzurco89@gmail.com>
|
-- Revised 2015/19/08 - v0.5 - Gioacchino Mazzurco <gmazzurco89@gmail.com>
|
||||||
-- * added multitag support to share credential easier accross
|
-- * added multitag support to share credential easier across
|
||||||
-- scripts
|
-- scripts
|
||||||
--
|
--
|
||||||
|
|
||||||
|
|||||||
@@ -7,7 +7,7 @@
|
|||||||
-- in libssh2-utility instead, which wraps many of the functions here in an easier
|
-- in libssh2-utility instead, which wraps many of the functions here in an easier
|
||||||
-- to use class, SSHConnection.
|
-- to use class, SSHConnection.
|
||||||
--
|
--
|
||||||
-- For perfomance reasons, the modules reuses the NSE's existing nsock socket
|
-- For performance reasons, the modules reuses the NSE's existing nsock socket
|
||||||
-- pool.
|
-- pool.
|
||||||
--
|
--
|
||||||
-- @author Devin Bjelland
|
-- @author Devin Bjelland
|
||||||
|
|||||||
@@ -16,7 +16,7 @@ _ENV = stdnse.module("mqtt", stdnse.seeall)
|
|||||||
--
|
--
|
||||||
-- This library does not currently implement the entire MQTT protocol,
|
-- This library does not currently implement the entire MQTT protocol,
|
||||||
-- only those control packets which are necessary for existing scripts
|
-- only those control packets which are necessary for existing scripts
|
||||||
-- are included. Extending to accomodate additional control packets
|
-- are included. Extending to accommodate additional control packets
|
||||||
-- should not be difficult.
|
-- should not be difficult.
|
||||||
--
|
--
|
||||||
-- @author "Mak Kolybabi <mak@kolybabi.com>"
|
-- @author "Mak Kolybabi <mak@kolybabi.com>"
|
||||||
|
|||||||
@@ -3494,7 +3494,7 @@ end
|
|||||||
-- In order to remember the starting and ending positions of different unmarshalled
|
-- In order to remember the starting and ending positions of different unmarshalled
|
||||||
-- strings and SERVICE_STATUS structs I had to store the previous offset of the
|
-- strings and SERVICE_STATUS structs I had to store the previous offset of the
|
||||||
-- unmarshalled string. This previous offset will be helpful while retrieving the
|
-- unmarshalled string. This previous offset will be helpful while retrieving the
|
||||||
-- continous strings from the buffer.
|
-- continuous strings from the buffer.
|
||||||
--
|
--
|
||||||
--@param arguments The marshalled arguments to extract the data.
|
--@param arguments The marshalled arguments to extract the data.
|
||||||
--@param pos The position within <code>arguments</code>.
|
--@param pos The position within <code>arguments</code>.
|
||||||
|
|||||||
@@ -50,7 +50,7 @@ function bignum_is_bit_set(bignum, position)
|
|||||||
|
|
||||||
--- Checks whether <code>bignum</code> is probably prime.
|
--- Checks whether <code>bignum</code> is probably prime.
|
||||||
--
|
--
|
||||||
-- Performs Miller-Rabin probablistic primality tests.
|
-- Performs Miller-Rabin probabilistic primality tests.
|
||||||
-- @param bignum bignum to check for primality
|
-- @param bignum bignum to check for primality
|
||||||
-- @param nchecks Number of checks to perform. Default: number of checks dependent on bitsize of bignum, with a false positive rate of at most 2^-80
|
-- @param nchecks Number of checks to perform. Default: number of checks dependent on bitsize of bignum, with a false positive rate of at most 2^-80
|
||||||
-- @return True if the number is probably prime, false if it is composite.
|
-- @return True if the number is probably prime, false if it is composite.
|
||||||
|
|||||||
@@ -2749,7 +2749,7 @@ function file_delete(host, share, remotefile)
|
|||||||
end
|
end
|
||||||
|
|
||||||
---
|
---
|
||||||
-- List files based on a pattern withing a given share and directory
|
-- List files based on a pattern within a given share and directory
|
||||||
--
|
--
|
||||||
-- @param smbstate the SMB object associated with the connection
|
-- @param smbstate the SMB object associated with the connection
|
||||||
-- @param fname filename to search for, relative to share path
|
-- @param fname filename to search for, relative to share path
|
||||||
|
|||||||
@@ -225,7 +225,7 @@ Telnet = {
|
|||||||
SFE_3270 = "192",
|
SFE_3270 = "192",
|
||||||
order_max = "\063", -- tn3270 orders can't be greater than 0x3F
|
order_max = "\063", -- tn3270 orders can't be greater than 0x3F
|
||||||
COLS = 80, -- hardcoded width.
|
COLS = 80, -- hardcoded width.
|
||||||
ROWS = 24, -- hardcoded rows. We only support 3270 model 2 wich was 24x80.
|
ROWS = 24, -- hardcoded rows. We only support 3270 model 2 which was 24x80.
|
||||||
buffer_addr = 1,
|
buffer_addr = 1,
|
||||||
cursor_addr = 1,
|
cursor_addr = 1,
|
||||||
isSSL = true,
|
isSSL = true,
|
||||||
|
|||||||
@@ -56,7 +56,7 @@ local function make_set(t)
|
|||||||
return s
|
return s
|
||||||
end
|
end
|
||||||
|
|
||||||
-- these are allowed withing a path segment, along with alphanum
|
-- these are allowed within a path segment, along with alphanum
|
||||||
-- other characters must be escaped
|
-- other characters must be escaped
|
||||||
local segment_set = make_set {
|
local segment_set = make_set {
|
||||||
"-", "_", ".", "!", "~", "*", "'", "(",
|
"-", "_", ".", "!", "~", "*", "'", "(",
|
||||||
|
|||||||
@@ -717,7 +717,7 @@ static void terminate_overlapped_event(struct npool *nsp, struct nevent *nse) {
|
|||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
/* Retrieve the ammount of bytes transferred or set the appropriate error */
|
/* Retrieve the amount of bytes transferred or set the appropriate error */
|
||||||
static int get_overlapped_result(struct npool *nsp, int fd, const void *buffer, size_t count) {
|
static int get_overlapped_result(struct npool *nsp, int fd, const void *buffer, size_t count) {
|
||||||
char *buf = (char *)buffer;
|
char *buf = (char *)buffer;
|
||||||
DWORD dwRes = 0;
|
DWORD dwRes = 0;
|
||||||
|
|||||||
@@ -2104,7 +2104,7 @@ void printosscanoutput(Target *currenths) {
|
|||||||
log_flush_all();
|
log_flush_all();
|
||||||
}
|
}
|
||||||
|
|
||||||
/* An auxillary function for printserviceinfooutput(). Returns
|
/* An auxiliary function for printserviceinfooutput(). Returns
|
||||||
non-zero if a and b are considered the same hostnames. */
|
non-zero if a and b are considered the same hostnames. */
|
||||||
static int hostcmp(const char *a, const char *b) {
|
static int hostcmp(const char *a, const char *b) {
|
||||||
return strcasecmp(a, b) == 0;
|
return strcasecmp(a, b) == 0;
|
||||||
|
|||||||
@@ -24,7 +24,7 @@ found for CICS transaction IDs.
|
|||||||
---
|
---
|
||||||
-- @args idlist Path to list of transaction IDs.
|
-- @args idlist Path to list of transaction IDs.
|
||||||
-- Defaults to the list of CICS transactions from IBM.
|
-- Defaults to the list of CICS transactions from IBM.
|
||||||
-- @args cics-enum.commands Commands in a semi-colon seperated list needed
|
-- @args cics-enum.commands Commands in a semi-colon separated list needed
|
||||||
-- to access CICS. Defaults to <code>CICS</code>.
|
-- to access CICS. Defaults to <code>CICS</code>.
|
||||||
-- @args cics-enum.path Folder used to store valid transaction id 'screenshots'
|
-- @args cics-enum.path Folder used to store valid transaction id 'screenshots'
|
||||||
-- Defaults to <code>None</code> and doesn't store anything.
|
-- Defaults to <code>None</code> and doesn't store anything.
|
||||||
|
|||||||
@@ -12,7 +12,7 @@ CICS User ID brute forcing script for the CESL login screen.
|
|||||||
]]
|
]]
|
||||||
|
|
||||||
---
|
---
|
||||||
-- @args cics-user-brute.commands Commands in a semi-colon seperated list needed
|
-- @args cics-user-brute.commands Commands in a semi-colon separated list needed
|
||||||
-- to access CICS. Defaults to <code>CICS</code>.
|
-- to access CICS. Defaults to <code>CICS</code>.
|
||||||
--
|
--
|
||||||
-- @usage
|
-- @usage
|
||||||
|
|||||||
@@ -13,7 +13,7 @@ CICS User ID enumeration script for the CESL/CESN Login screen.
|
|||||||
---
|
---
|
||||||
-- @args idlist Path to list of transaction IDs.
|
-- @args idlist Path to list of transaction IDs.
|
||||||
-- Defaults to the list of CICS transactions from IBM.
|
-- Defaults to the list of CICS transactions from IBM.
|
||||||
-- @args cics-user-enum.commands Commands in a semi-colon seperated list needed
|
-- @args cics-user-enum.commands Commands in a semi-colon separated list needed
|
||||||
-- to access CICS. Defaults to <code>CICS</code>.
|
-- to access CICS. Defaults to <code>CICS</code>.
|
||||||
-- @args cics-user-enum.transaction By default this script uses the <code>CESL</code> transaction.
|
-- @args cics-user-enum.transaction By default this script uses the <code>CESL</code> transaction.
|
||||||
-- on some systems the transactio ID <code>CESN</code> is needed. Use this argument to change the
|
-- on some systems the transactio ID <code>CESN</code> is needed. Use this argument to change the
|
||||||
|
|||||||
@@ -31,9 +31,9 @@ This script takes inspiration from the various scripts listed here:
|
|||||||
-- | Allowed Methods: GET, HEAD, COPY, MOVE, POST, PUT, PROPFIND, PROPPATCH, OPTIONS, MKCOL, DELETE, TRACE, REPORT
|
-- | Allowed Methods: GET, HEAD, COPY, MOVE, POST, PUT, PROPFIND, PROPPATCH, OPTIONS, MKCOL, DELETE, TRACE, REPORT
|
||||||
-- | Server Type: DAV/0.9.8 Python/2.7.6
|
-- | Server Type: DAV/0.9.8 Python/2.7.6
|
||||||
-- | Server Date: Fri, 22 May 2015 19:28:00 GMT
|
-- | Server Date: Fri, 22 May 2015 19:28:00 GMT
|
||||||
-- | WebDAV type: unkown
|
-- | WebDAV type: Unknown
|
||||||
-- | Directory Listing:
|
-- | Directory Listing:
|
||||||
-- | http://localhosft
|
-- | http://localhost
|
||||||
-- | http://localhost:8008/WebDAVTest_b1tqTWeyRR
|
-- | http://localhost:8008/WebDAVTest_b1tqTWeyRR
|
||||||
-- | http://localhost:8008/WebDAVTest_A0QWJb7hcK
|
-- | http://localhost:8008/WebDAVTest_A0QWJb7hcK
|
||||||
-- | http://localhost:8008/WebDAVTest_hf9Mqqpi1M
|
-- | http://localhost:8008/WebDAVTest_hf9Mqqpi1M
|
||||||
@@ -44,7 +44,7 @@ This script takes inspiration from the various scripts listed here:
|
|||||||
-- PROPFIND, PROPPATCH, OPTIONS, MKCOL, DELETE, TRACE, REPORT</elem>
|
-- PROPFIND, PROPPATCH, OPTIONS, MKCOL, DELETE, TRACE, REPORT</elem>
|
||||||
-- <elem key="Server Type">DAV/0.9.8 Python/2.7.6</elem>
|
-- <elem key="Server Type">DAV/0.9.8 Python/2.7.6</elem>
|
||||||
-- <elem key="Server Date">Fri, 22 May 2015 19:28:00 GMT</elem>
|
-- <elem key="Server Date">Fri, 22 May 2015 19:28:00 GMT</elem>
|
||||||
-- <elem key="WebDAV type">unkown</elem>
|
-- <elem key="WebDAV type">Unknown</elem>
|
||||||
-- <table key="Directory Listing">
|
-- <table key="Directory Listing">
|
||||||
-- <elem>http://localhost</elem>
|
-- <elem>http://localhost</elem>
|
||||||
-- <elem>http://localhost:8008/WebDAVTest_b1tqTWeyRR</elem>
|
-- <elem>http://localhost:8008/WebDAVTest_b1tqTWeyRR</elem>
|
||||||
@@ -78,7 +78,7 @@ local function get_options (host, port, path)
|
|||||||
|
|
||||||
if response.header['dav'] and response.header['dav']:find('1') then
|
if response.header['dav'] and response.header['dav']:find('1') then
|
||||||
ret['WebDAV'] = true
|
ret['WebDAV'] = true
|
||||||
ret['WebDAV type'] = 'Unkown'
|
ret['WebDAV type'] = 'Unknown'
|
||||||
if response.header['X-MSDAVEXT'] then
|
if response.header['X-MSDAVEXT'] then
|
||||||
ret['WebDAV type'] = 'SHAREPOINT DAV'
|
ret['WebDAV type'] = 'SHAREPOINT DAV'
|
||||||
end
|
end
|
||||||
|
|||||||
@@ -48,7 +48,7 @@ portrule = shortport.port_or_service(9390, "openvas")
|
|||||||
--- Return the list of targets defined for a given user
|
--- Return the list of targets defined for a given user
|
||||||
--
|
--
|
||||||
-- @param host the target host table
|
-- @param host the target host table
|
||||||
-- @param port the targetted OMP port
|
-- @param port the targeted OMP port
|
||||||
-- @param username the username to use to login
|
-- @param username the username to use to login
|
||||||
-- @param password the password to use to login
|
-- @param password the password to use to login
|
||||||
-- @return the list of targets for this user or nil
|
-- @return the list of targets for this user or nil
|
||||||
|
|||||||
@@ -153,7 +153,7 @@ local function get_response(sd, request)
|
|||||||
if status == nil then
|
if status == nil then
|
||||||
stdnse.debug("Error: " .. data)
|
stdnse.debug("Error: " .. data)
|
||||||
if data == "TIMEOUT" then
|
if data == "TIMEOUT" then
|
||||||
-- Avoids false results by capturing NACK after TIMEOUT occured.
|
-- Avoids false results by capturing NACK after TIMEOUT occurred.
|
||||||
status, data = sd:receive_buf("##", true)
|
status, data = sd:receive_buf("##", true)
|
||||||
break
|
break
|
||||||
else
|
else
|
||||||
|
|||||||
@@ -23,7 +23,7 @@ The script checks the preconditions for the exploit to happen:
|
|||||||
services running potentially vulnerable versions of Samba, and run the
|
services running potentially vulnerable versions of Samba, and run the
|
||||||
exploit against those services. This is useful if you wish to scan a
|
exploit against those services. This is useful if you wish to scan a
|
||||||
group of hosts quickly for the vulnerability based on the version number.
|
group of hosts quickly for the vulnerability based on the version number.
|
||||||
However, because of ther version number, some patched versions may still
|
However, because of their version number, some patched versions may still
|
||||||
show up as likely vulnerable. Here, we use smb.get_os(host) to do
|
show up as likely vulnerable. Here, we use smb.get_os(host) to do
|
||||||
versioning of the Samba version and compare it to see if it is a known
|
versioning of the Samba version and compare it to see if it is a known
|
||||||
vulnerable version of Samba. Note that this check is not conclusive:
|
vulnerable version of Samba. Note that this check is not conclusive:
|
||||||
|
|||||||
@@ -922,7 +922,7 @@ end
|
|||||||
-- "server": the server prefers its own order. In this case ciphers is non-nil.
|
-- "server": the server prefers its own order. In this case ciphers is non-nil.
|
||||||
-- "client": the server follows the client preference. ciphers is nil.
|
-- "client": the server follows the client preference. ciphers is nil.
|
||||||
-- "indeterminate": returned when there are only 0 or 1 ciphers. ciphers is nil.
|
-- "indeterminate": returned when there are only 0 or 1 ciphers. ciphers is nil.
|
||||||
-- nil: an error ocurred during the test. err is non-nil.
|
-- nil: an error occurred during the test. err is non-nil.
|
||||||
-- err is an error message string that is non-nil when preference is nil or
|
-- err is an error message string that is non-nil when preference is nil or
|
||||||
-- indeterminate.
|
-- indeterminate.
|
||||||
--
|
--
|
||||||
|
|||||||
@@ -33,7 +33,7 @@ TSO user IDs have the following rules:
|
|||||||
-- |_ Statistics: Performed 6 guesses in 6 seconds, average tps: 1
|
-- |_ Statistics: Performed 6 guesses in 6 seconds, average tps: 1
|
||||||
-- Final times for host: srtt: 96305 rttvar: 72303 to: 385517
|
-- Final times for host: srtt: 96305 rttvar: 72303 to: 385517
|
||||||
--
|
--
|
||||||
-- @args tso-brute.commands Commands in a semi-colon seperated list needed
|
-- @args tso-brute.commands Commands in a semi-colon separated list needed
|
||||||
-- to access TSO. Defaults to <code>TSO</code>.
|
-- to access TSO. Defaults to <code>TSO</code>.
|
||||||
--
|
--
|
||||||
-- @args tso-brute.always_logon TSO logon can kick a user off if it guesses
|
-- @args tso-brute.always_logon TSO logon can kick a user off if it guesses
|
||||||
|
|||||||
@@ -32,7 +32,7 @@ TSO user IDs have the following rules:
|
|||||||
]]
|
]]
|
||||||
|
|
||||||
---
|
---
|
||||||
-- @args tso-enum.commands Commands in a semi-colon seperated list needed
|
-- @args tso-enum.commands Commands in a semi-colon separated list needed
|
||||||
-- to access TSO. Defaults to <code>tso</code>.
|
-- to access TSO. Defaults to <code>tso</code>.
|
||||||
--
|
--
|
||||||
-- @usage
|
-- @usage
|
||||||
|
|||||||
@@ -27,7 +27,7 @@ found for application IDs.
|
|||||||
---
|
---
|
||||||
--@args idlist Path to list of application IDs to test.
|
--@args idlist Path to list of application IDs to test.
|
||||||
-- Defaults to <code>nselib/data/vhosts-default.lst</code>.
|
-- Defaults to <code>nselib/data/vhosts-default.lst</code>.
|
||||||
--@args vtam-enum.commands Commands in a semi-colon seperated list needed
|
--@args vtam-enum.commands Commands in a semi-colon separated list needed
|
||||||
-- to access VTAM. Defaults to <code>nothing</code>.
|
-- to access VTAM. Defaults to <code>nothing</code>.
|
||||||
--@args vtam-enum.path Folder used to store valid transaction id 'screenshots'
|
--@args vtam-enum.path Folder used to store valid transaction id 'screenshots'
|
||||||
-- Defaults to <code>None</code> and doesn't store anything.
|
-- Defaults to <code>None</code> and doesn't store anything.
|
||||||
|
|||||||
Reference in New Issue
Block a user