From 6a655cdc10d6d176bddfba7e82da832f459ee117 Mon Sep 17 00:00:00 2001 From: paulino Date: Thu, 31 Oct 2013 04:06:00 +0000 Subject: [PATCH] Adds http-iis-short-name-brute.nse. The script detects Microsoft IIS servers vulnerable to a filename disclosure and denial of service vulnerability. --- CHANGELOG | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/CHANGELOG b/CHANGELOG index d1fec61f7..c89e4ebae 100644 --- a/CHANGELOG +++ b/CHANGELOG @@ -1,5 +1,10 @@ # Nmap Changelog ($Id$); -*-text-*- +o [NSE] Add http-iis-short-name-brute script that detects Microsoft IIS + servers vulnerable to a file/folder name disclosure and a denial of + service vulnerability. The script obtains the "shortnames" of the + files and folders in the webroot folder. [Paulino Calderon] + o Idle scan now supports IPv6. IPv6 packets don't usually come with fragments identifiers like IPv4 packets do, so new techniques had to be developed to make idle scan possible. The implementation is by