PenTest/nmap
1
0
Fork 0
mirror of https://github.com/nmap/nmap.git synced 2025-12-16 12:49:02 +00:00
Code Issues Projects Releases Wiki Activity

Update todo file

Browse Source
This commit is contained in:
gorjan
2011-06-09 00:25:23 +00:00
parent 381bb03d70
commit f842c0d1ba
1 changed files with 3 additions and 18 deletions
Download Patch File Download Diff File Expand all files Collapse all files

21
todo/gorjan.txt
View File

@@ -11,32 +11,22 @@ Work in progress:
ToDo: ToDo:
* broadcast-ping.nse * broadcast-ping.nse
* Selection of discovery script candidates
* Set up virtual machine so I don't install servers localy (Arch?)
===== =====
Maybe (the ones with ** aren't on the Script_Ideas Page yet) Maybe (the ones with ** aren't on the Script_Ideas Page yet)
** faceniff-discovery ** lltd
http://faceniff.ponury.net/
Try if Faceniff can be detected using similar methods to firesheep
** targets-lltd (and perhaps otherscripts)
** lltd-info (?)
http://en.wikipedia.org/wiki/Link_Layer_Topology_Discovery http://en.wikipedia.org/wiki/Link_Layer_Topology_Discovery
** targets-lldp ** lldp
http://en.wikipedia.org/wiki/Link_Layer_Discovery_Protocol http://en.wikipedia.org/wiki/Link_Layer_Discovery_Protocol
** disjunctive-traceroute + target add ** disjunctive-traceroute + target add
http://ccr.sigcomm.org/online/?q=node/398 http://ccr.sigcomm.org/online/?q=node/398
* firesheep-discovery
http://research.zscaler.com/2010/11/detecting-firesheep.html
* Bonjour / mdns / llmnr etc. * Bonjour / mdns / llmnr etc.
(DNS protocols support) + backscatter into dns scripts where applicable (DNS protocols support) + backscatter into dns scripts where applicable?
* targets-asn * targets-asn
John Bond is working on this. It's called asn-to-prefixes. Perhaps I could John Bond is working on this. It's called asn-to-prefixes. Perhaps I could
@@ -48,9 +38,6 @@ dhcp-discover as a prerule, so it doesn't run by default. But it doesn't run by
default. It's discovery, intrusive, but not default. Maybe just add the prerule default. It's discovery, intrusive, but not default. Maybe just add the prerule
there, and some way of forcibly initiating the prerule (like an argument). there, and some way of forcibly initiating the prerule (like an argument).
* imap-brute
The library will need to be extended.
* hnap-info * hnap-info
* hnap-auth-bypass * hnap-auth-bypass
A nice hnap library would be fitting, that will make these scripts a breeze. A nice hnap library would be fitting, that will make these scripts a breeze.
@@ -60,8 +47,6 @@ I'd need testing equipment, or some :S implementation.
There are a couple of default passwords that snmp-brute uses atm which should be There are a couple of default passwords that snmp-brute uses atm which should be
considered even when it's the brute.lua is used considered even when it's the brute.lua is used
* pop-brute port to brute fraework
* vuze-dht-version * vuze-dht-version
* bittorrent-dht-nodes * bittorrent-dht-nodes
* bgpmon-info * bgpmon-info