diff --git a/CHANGELOG b/CHANGELOG index 5c3765eb6..607425f03 100644 --- a/CHANGELOG +++ b/CHANGELOG @@ -1,5 +1,9 @@ # Nmap Changelog ($Id$); -*-text-*- +o [NSE] Script nje-pass-brute brute-forces the password to a NJE node, given a + valid RHOST and OHOST. Helpfully, nje-node-brute can now brute force both of + those values. [Soldier of Fortran] + o [NSE][GH#557] Script ssl-cert-intaddr will search for private IP addresses in TLS certificate fields and extensions. [Steve Benson] diff --git a/scripts/nje-node-brute.nse b/scripts/nje-node-brute.nse index bd47f2e0c..03dac7031 100644 --- a/scripts/nje-node-brute.nse +++ b/scripts/nje-node-brute.nse @@ -71,7 +71,7 @@ Since most systems will only have one OHOST name, it is recommended to use the -- 2016-03-22 - v0.2 - Added RHOST Brute forcing. author = "Soldier of Fortran" -license = "Same as Nmap--See http://nmap.org/book/man-legal.html" +license = "Same as Nmap--See https://nmap.org/book/man-legal.html" categories = {"intrusive", "brute"} portrule = shortport.port_or_service({175,2252}, "nje") diff --git a/scripts/script.db b/scripts/script.db index 1812dc9f0..d9d426979 100644 --- a/scripts/script.db +++ b/scripts/script.db @@ -368,6 +368,7 @@ Entry { filename = "nfs-ls.nse", categories = { "discovery", "safe", } } Entry { filename = "nfs-showmount.nse", categories = { "discovery", "safe", } } Entry { filename = "nfs-statfs.nse", categories = { "discovery", "safe", } } Entry { filename = "nje-node-brute.nse", categories = { "brute", "intrusive", } } +Entry { filename = "nje-pass-brute.nse", categories = { "brute", "intrusive", } } Entry { filename = "nntp-ntlm-info.nse", categories = { "default", "discovery", "safe", } } Entry { filename = "nping-brute.nse", categories = { "brute", "intrusive", } } Entry { filename = "nrpe-enum.nse", categories = { "discovery", "intrusive", } }