11 Commits

Author	SHA1	Message	Date
ron	fbf2c3d6a7	Print the http status along with the result, if it isn't 200 OK. This was the original behaviour, but it got lost along the way.	2009-08-23 16:58:53 +00:00
ron	fbc8e180ca	Converted http-userdir-enum.nse to use my http-enum.nse logic (from http.lua). Also moved the 'displayall' script-arg back into the script, not http.lua, because http-userdir-enum.nse actually wants to find non-200 pages (403 Access Denied, for instance).	2009-08-23 00:43:46 +00:00
ron	cf33de55f3	Moved the definition for the 'displayall' argument into http.lua.	2009-08-23 00:24:23 +00:00
ron	77e7738545	Moved the meat of the http-enum.nse code (the 404-detection, HEAD-detection, etc) into http.lua. It may be a better idea to use http-helper.lua or something similar, but for now http.lua works. I'm open to suggestiosn.	2009-08-23 00:22:20 +00:00
ron	4616e62760	Fix some tabs	2009-08-22 23:55:43 +00:00
ron	a546ebc84f	Clean up a lot of the http-enum.nse code; add some comments; abstract the 'is this a 404?' logic into a function (so it can eventually used by other scripts	2009-08-22 23:54:27 +00:00
ron	c9a62acf31	A major overhaul of the http-enum.nse script: ... * Cleaned up and function-ized the code. Planning to move the functions to http.lua or similar to let other scripts (like http-userdir-enum.nse) use them. * Better support for different HTTP error codes * Significantly improved detection of 404 pages to prevent false positives. Some of the techniques used: - Request a non-existent page and check the status code - If it's 200, try to remove anything that may change (times, URI, filenames, etc), md5 it if ssl is available, and store it. Request a second 404 page and do the same. If they don't match, abort. - If it's any other error code, store it, and look for it in addition to 404 Not Found - Request the root folder, / - If it returns a 301 Move Permanently or 401 Authentication Required, abort * Abstracted the fingerprints into files in the nselib/data directory: - http-fingerprints: common files/folders - yokoso-fingerprints: common applications (from the Yokoso project, by InGuardians -- used under the Nmap license with pemission from Kevin Johnson -- http://seclists.org/nmap-dev/2009/q3/0685.html) * Added a script-arg that can display all output (except known 404s), instead of just 200 OK and 401 Authentication Required * Added a lot of debugging messages	2009-08-22 23:19:16 +00:00
batrick	5e362ac43d	Changed a global variable to a local to avoid an error from the strict ... module.	2009-08-15 14:57:52 +00:00
joao	bf4599385e	Added pipeline support to http-enum.nse	2009-08-12 01:52:03 +00:00
joao	8e145d6994	Fixing script categories	2009-08-10 11:17:52 +00:00
joao	53cefe9de0	Included Rob Nicholl's http-enum.nse script	2009-07-24 09:18:34 +00:00