PenTest/nmap
1
0
Fork 0
mirror of https://github.com/nmap/nmap.git synced 2025-12-17 21:19:01 +00:00
Code Issues Projects Releases Wiki Activity

* Fixed a bug in the brute library prevented additional passwords from

Browse Source 
being found if run in passonly mode.

* Fixed a bug in the brute library preventing detection of duplicate
  credential entries requested from the iterator.
This commit is contained in:
patrik
2011-07-12 21:23:12 +00:00
parent 23d2e0d31f
commit aadac7c8d5
1 changed files with 10 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

14
nselib/brute.lua
View File

@@ -402,13 +402,13 @@ Engine =
-- @return iterator function -- @return iterator function
get_next_credential = function( self ) get_next_credential = function( self )
local function next_credential () local function next_credential ()
local used_creds = {}
-- iterate over all credential iterators -- iterate over all credential iterators
for _, iter in ipairs( self.iterators ) do for _, iter in ipairs( self.iterators ) do
for user, pass in iter do for user, pass in iter do
-- makes sure the credentials have not been tested before -- makes sure the credentials have not been tested before
if ( not(used_creds[user..pass]) ) then self.used_creds = self.used_creds or {}
used_creds[user..pass] = true if ( not(self.used_creds[user..pass]) ) then
self.used_creds[user..pass] = true
coroutine.yield( user, pass ) coroutine.yield( user, pass )
end end
end end
@@ -511,7 +511,13 @@ Engine =
creds.Credentials:new( self.options.script_name, self.host, self.port ):add(response.username, response.password, response.state ) creds.Credentials:new( self.options.script_name, self.host, self.port ):add(response.username, response.password, response.state )
stdnse.print_debug("Discovered account: %s", response:toString()) stdnse.print_debug("Discovered account: %s", response:toString())
self.found_accounts[response.username] = true
-- if we're running in passonly mode, and want to continue guessing
-- we will have a problem as the username is always the same.
-- in this case we don't log the account as found.
if ( not(self.options.passonly) ) then
self.found_accounts[response.username] = true
end
-- Check if firstonly option was set, if so abort all threads -- Check if firstonly option was set, if so abort all threads
if ( self.options.firstonly ) then self.terminate_all = true end if ( self.options.firstonly ) then self.terminate_all = true end