PenTest/nmap
1
0
Fork 0
mirror of https://github.com/nmap/nmap.git synced 2025-12-26 01:19:03 +00:00
Code Issues Projects Releases Wiki Activity

Update the script descriptions/nsedoc a bit

Browse Source
This commit is contained in:
fyodor
2012-01-01 22:21:08 +00:00
parent 2461746840
commit 78033599ed
25 changed files with 49 additions and 46 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
scripts/http-apache-negotiation.nse
View File

@@ -1,13 +1,13 @@
description = [[
Checks if the target has mod_negotiation is enabled.
Checks if the target http server has mod_negotiation enabled. This
feature can be leveraged to find hidden resources and spider a web
site using fewer requests.
The script works by sending requests for resources like index and home
without specifying the extension. If mod_negotiate is enabled (default
Apache configuration), the target would reply with content-location header
containing target resource (such as index.html) and vary header containing
"negotiate" depending on the configuration.
This could be leveraged to find hidden resources and spider a web site
using less requests.
For more information, see:
* http://www.wisec.it/sectou.php?id=4698ebdc59d15
@@ -27,7 +27,7 @@ For more information, see:
-- @args http-apache-negotiation.root target web site root.
-- Defaults to <code>/</code>.
author = "Hani Benhabiles <kroosec@gmail.com>"
author = "Hani Benhabiles"
license = "Same as Nmap--See http://nmap.org/book/man-legal.html"