PenTest/nmap
1
0
Fork 0
mirror of https://github.com/nmap/nmap.git synced 2025-12-07 13:11:28 +00:00
Code Issues Projects Releases Wiki Activity

Avoid testing invalid usernames

Browse Source
This commit is contained in:
dmiller
2020-10-19 17:13:22 +00:00
parent 81bc933118
commit 72ff06d02b
1 changed files with 11 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

14
scripts/pop3-brute.nse
View File

@@ -81,12 +81,18 @@ Driver = {
pstatus, perror = self.login_function(self.socket, username, password, self.additional) pstatus, perror = self.login_function(self.socket, username, password, self.additional)
if pstatus then if pstatus then
return true, creds.Account:new(username, password, creds.State.VALID) return true, creds.Account:new(username, password, creds.State.VALID)
elseif (perror == pop3.err.pwError) then else
return false, brute.Error:new("Wrong password.") local err
if (perror == pop3.err.pwError) then
err = brute.Error:new("Wrong password.")
elseif (perror == pop3.err.userError) then elseif (perror == pop3.err.userError) then
return false, brute.Error:new("Wrong username.") err = brute.Error:new("Wrong username.")
err:setInvalidAccount(username)
else
err = brute.Error:new("Login failed.")
end
return false, err
end end
return false, brute.Error:new("Login failed.")
end, --login end, --login
disconnect = function(self) disconnect = function(self)