Be more strict about NetBus protocol. Fixes false positives

Had a report via service fingerprint correction of netbus-version
reporting an unrelated service as NetBuster. This would happen for any
service on port 12345 that responds with a banner containing less than 2
carriage returns, or which closes the connection after the first NetBus
protocol message. Now, all netbus-* scripts require the banner to begin
with "NetBus" before they will continue.

scripts/netbus-auth-bypass.nse

@@ -37,7 +37,11 @@ action = function( host, port )
     return
   end
   local buffer, _ = stdnse.make_buffer(socket, "\r")
-  buffer() --discard banner
+  _ = buffer()
+  if not (_ and _:match("^NetBus")) then
+    stdnse.debug1("Not NetBus")
+    return nil
+  end
 
   -- The first argument of Password is the super-login bit.
   -- On vulnerable servers any password will do as long as